Red Hat Security AdvisoryRHSA-2010:0580
tomcat5 security update
Released 2010-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tomcat5-5.5.23-0jpp.9.el5_5, tomcat5-5.5.23-0jpp.9.el5_5.i386, tomcat5-5.5.23-0jpp.9.el5_5.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) tomcat5-5.5.23-0jpp.9.el5_5, tomcat5-jsp-2.0-api-5.5.23-0jpp.9.el5_5, tomcat5-jsp-2.0-api-5.5.23-0jpp.9.el5_5.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) tomcat5-5.5.23-0jpp.9.el5_5, tomcat5-5.5.23-0jpp.9.el5_5.i386, tomcat5-admin-webapps-5.5.23-0jpp.9.el5_5 +15
Fixes 4 records
Priority MEDIUM 61
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or ob…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.54779 · Published 2010-07-13 · Fixed in 7.0.2, 5.5.30 +1 CWE-119
Priority LOW 38
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a ..
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09638 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
Priority LOW 33
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10741 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
Priority LOW 28
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows r…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05012 · Published 2010-08-05 · Fixed CWE-79
THREATIST.IORead the docs