Red Hat Security AdvisoryRHSA-2007:0164
mod_jk security update
Released 2007-04-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Application Server v2 4AS mod_jk-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh.i386 +6
- Red Hat Application Server v2 4ES mod_jk-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh.i386 +4
- Red Hat Application Server v2 4WS mod_jk-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh, mod_jk-ap20-1.2.20-1jpp_1rh.i386 +4
Fixes 1 record
Priority HIGH 73
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.81627 · Published 2007-03-04 · Fixed