Red Hat Security AdvisoryRHSA-2010:0582
tomcat5 security update
Released 2010-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Application Server v2 4AS tomcat5-5.5.23-0jpp_4rh.17, tomcat5-admin-webapps-5.5.23-0jpp_4rh.17, tomcat5-common-lib-5.5.23-0jpp_4rh.17 +8
- Red Hat Application Server v2 4ES tomcat5-5.5.23-0jpp_4rh.17, tomcat5-admin-webapps-5.5.23-0jpp_4rh.17, tomcat5-common-lib-5.5.23-0jpp_4rh.17 +8
- Red Hat Application Server v2 4WS tomcat5-5.5.23-0jpp_4rh.17, tomcat5-admin-webapps-5.5.23-0jpp_4rh.17, tomcat5-common-lib-5.5.23-0jpp_4rh.17 +8
Fixes 3 records
Priority MEDIUM 61
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or ob…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.54779 · Published 2010-07-13 · Fixed in 7.0.2, 5.5.30 +1 CWE-119
Priority LOW 38
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a ..
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09638 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
Priority LOW 33
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10741 · Published 2010-01-28 · Fixed in 5.5.29, 6.0.24 CWE-22
