Red Hat Security AdvisoryRHSA-2012:0474
tomcat5 security update
Released 2012-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) tomcat5-5.5.23-0jpp.31.el5_8, tomcat5-5.5.23-0jpp.31.el5_8.i386, tomcat5-admin-webapps-5.5.23-0jpp.31.el5_8 +15
- Red Hat Enterprise Linux (v. 5 server) tomcat5-5.5.23-0jpp.31.el5_8, tomcat5-5.5.23-0jpp.31.el5_8.i386, tomcat5-5.5.23-0jpp.31.el5_8.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) tomcat5-5.5.23-0jpp.31.el5_8, tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8, tomcat5-jsp-2.0-api-5.5.23-0jpp.31.el5_8.i386 +2
Fixes 2 records
Priority MEDIUM 63
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to caus…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.79713 · Published 2012-01-05 · Fixed in 5.5.35, 6.0.35 +1 CWE-399
Priority LOW 36
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10478 · Published 2012-01-19 · Fixed in 5.5.35, 6.0.34 +1 CWE-189
