Red Hat Security AdvisoryRHSA-2013:0869
tomcat6 security update
Released 2013-05-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-admin-webapps-6.0.24-55.el6_4, tomcat6-docs-webapp-6.0.24-55.el6_4 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-admin-webapps-6.0.24-55.el6_4, tomcat6-docs-webapp-6.0.24-55.el6_4 +6
- Red Hat Enterprise Linux Server (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-el-2.1-api-6.0.24-55.el6_4, tomcat6-jsp-2.1-api-6.0.24-55.el6_4 +2
- Red Hat Enterprise Linux Server Optional (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-admin-webapps-6.0.24-55.el6_4, tomcat6-docs-webapp-6.0.24-55.el6_4 +2
- Red Hat Enterprise Linux Workstation (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-el-2.1-api-6.0.24-55.el6_4, tomcat6-jsp-2.1-api-6.0.24-55.el6_4 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6-6.0.24-55.el6_4, tomcat6-admin-webapps-6.0.24-55.el6_4, tomcat6-docs-webapp-6.0.24-55.el6_4 +2
Fixes 2 records
Priority LOW 31
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00372 · Published 2013-07-09 · Fixed CWE-59
Priority LOW 17
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02128 · Published 2013-07-09 · Fixed CWE-264
