Red Hat Security AdvisoryRHSA-2010:0581
tomcat5 and tomcat6 security update
Released 2010-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server tomcat5-5.5.28-9.patch_01.1.jdk6.ep5.el5, tomcat5-admin-webapps-5.5.28-9.patch_01.1.jdk6.ep5.el5, tomcat5-common-lib-5.5.28-9.patch_01.1.jdk6.ep5.el5 +20
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS tomcat5-5.5.28-9.patch_01.jdk6.ep5.el4, tomcat5-admin-webapps-5.5.28-9.patch_01.jdk6.ep5.el4, tomcat5-common-lib-5.5.28-9.patch_01.jdk6.ep5.el4 +20
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES tomcat5-5.5.28-9.patch_01.jdk6.ep5.el4, tomcat5-admin-webapps-5.5.28-9.patch_01.jdk6.ep5.el4, tomcat5-common-lib-5.5.28-9.patch_01.jdk6.ep5.el4 +20
Fixes 1 record
Priority MEDIUM 61
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or ob…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.54779 · Published 2010-07-13 · Fixed in 7.0.2, 5.5.30 +1 CWE-119
