Red Hat Security AdvisoryRHSA-2010:0583
tomcat5 security update
Released 2010-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Developer Suite v.3 (AS v.4) tomcat5-5.5.23-0jpp_21rh, tomcat5-common-lib-5.5.23-0jpp_21rh, tomcat5-jasper-5.5.23-0jpp_21rh +3
- Red Hat Developer Suite v.3 (ES v.4) tomcat5-5.5.23-0jpp_21rh, tomcat5-common-lib-5.5.23-0jpp_21rh, tomcat5-jasper-5.5.23-0jpp_21rh +3
- Red Hat Developer Suite v.3 (WS v.4) tomcat5-5.5.23-0jpp_21rh, tomcat5-common-lib-5.5.23-0jpp_21rh, tomcat5-jasper-5.5.23-0jpp_21rh +3
Fixes 1 record
Priority MEDIUM 61
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or ob…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.54779 · Published 2010-07-13 · Fixed in 7.0.2, 5.5.30 +1 CWE-119
