Red Hat Security Advisory

RHSA-2011:0350

tomcat5 and tomcat6 security update

Released 2011-03-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 1.0

Fixes 2 records

TI-2010-04209 CVE-2010-4476 · GHSA-gvgc-rxmh-5hvw

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 43

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2349 Published 2011-02-17 Fixed in 7.0.7, 6.0.32 +1

TI-2011-00461 CVE-2011-0534 · GHSA-43v2-6grp-9pp9

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the…

LOW 33

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07885 Published 2011-02-10 Fixed in 6.0.32, 7.0.8 CWE-399