Red Hat Security AdvisoryRHSA-2011:0348
tomcat6 security update
Released 2011-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server tomcat6-6.0.24-11.patch_03.ep5.el5, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el5, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el5 +7
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS tomcat6-6.0.24-11.patch_03.ep5.el4, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el4, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el4 +7
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES tomcat6-6.0.24-11.patch_03.ep5.el4, tomcat6-admin-webapps-6.0.24-11.patch_03.ep5.el4, tomcat6-docs-webapp-6.0.24-11.patch_03.ep5.el4 +7
Fixes 2 records
Priority MEDIUM 43
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2349 · Published 2011-02-17 · Fixed in 7.0.7, 6.0.32 +1
Priority LOW 33
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07885 · Published 2011-02-10 · Fixed in 6.0.32, 7.0.8 CWE-399
