Red Hat Security AdvisoryRHSA-2010:0584
jbossweb security update
Released 2010-08-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 AS jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 4 ES jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.2.0 for RHEL 5 Server jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el5
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el4
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server jbossweb-2.0.0-6.CP14.0jpp.ep1.1.el5
Fixes 2 records
Priority MEDIUM 61
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or ob…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.54779 · Published 2010-07-13 · Fixed in 7.0.2, 5.5.30 +1 CWE-119
Priority MEDIUM 45
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentic…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.52507 · Published 2010-04-23 · Partial fix · 5.5.30, 6.0.28 CWE-200
