Red Hat Security AdvisoryRHSA-2008:0042
tomcat security update
Released 2008-03-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tomcat5-5.5.23-0jpp.3.0.3.el5_1, tomcat5-5.5.23-0jpp.3.0.3.el5_1.i386, tomcat5-5.5.23-0jpp.3.0.3.el5_1.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) tomcat5-5.5.23-0jpp.3.0.3.el5_1, tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1, tomcat5-jsp-2.0-api-5.5.23-0jpp.3.0.3.el5_1.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) tomcat5-5.5.23-0jpp.3.0.3.el5_1, tomcat5-5.5.23-0jpp.3.0.3.el5_1.i386, tomcat5-admin-webapps-5.5.23-0jpp.3.0.3.el5_1 +15
Fixes 2 records
Priority MEDIUM 44
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.39681 · Published 2007-10-15 · Fixed CWE-22
Priority LOW 36
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify loggin…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.05156 · Published 2007-12-27 · Fixed CWE-264
