Red Hat Security AdvisoryRHSA-2014:1193
axis security update
Released 2014-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) axis-1.2.1-2jpp.8.el5_10, axis-1.2.1-2jpp.8.el5_10.i386, axis-1.2.1-2jpp.8.el5_10.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) axis-1.2.1-2jpp.8.el5_10, axis-1.2.1-2jpp.8.el5_10.i386
- Red Hat Enterprise Linux Desktop Optional (v. 6) axis-1.2.1-7.5.el6_5, axis-javadoc-1.2.1-7.5.el6_5, axis-manual-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) axis-1.2.1-2jpp.8.el5_10, axis-javadoc-1.2.1-2jpp.8.el5_10, axis-javadoc-1.2.1-2jpp.8.el5_10.i386 +2
- Red Hat Enterprise Linux HPC Node (v. 6) axis-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) axis-1.2.1-7.5.el6_5, axis-javadoc-1.2.1-7.5.el6_5, axis-manual-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux Server (v. 6) axis-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux Server Optional (v. 6) axis-1.2.1-7.5.el6_5, axis-javadoc-1.2.1-7.5.el6_5, axis-manual-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) axis-1.2.1-7.5.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) axis-1.2.1-7.5.el6_5, axis-javadoc-1.2.1-7.5.el6_5, axis-manual-1.2.1-7.5.el6_5
Fixes 1 record
Priority LOW 38
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09152 · Published 2014-08-27 · Partial fix CWE-297
