Red Hat Security Advisory

RHSA-2009:1617

tomcat security update for Red Hat Network Satellite Server

Released 2009-11-30 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Satellite 5.1 (RHEL v.4 AS) tomcat5-5.0.30-0jpp_16rh

Fixes 3 records

TI-2008-05231 CVE-2008-5515 · GHSA-9737-qmgc-hfr9

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and…

MEDIUM 41

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, whic…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.18685 Published 2009-06-16 Fixed in 4.1.40, 5.5.28 +1 CWE-22

TI-2009-00033 CVE-2009-0033 · GHSA-5cw4-ggx9-36vg

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when…

LOW 35

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10053 Published 2009-06-05 Fixed CWE-20

TI-2009-00747 CVE-2009-0783 · GHSA-hhjg-g8xq-hhr3

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18…

LOW 21

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web…

CVSS 3.0MEDIUM 4.2 Local High privileges No interaction EPSS 0.00809 Published 2009-06-05 Fixed in 6.0.20 CWE-200