Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2005-2090 (GCVE-0-2005-2090)
Vulnerability from cvelistv5 – Published: 2005-06-30 04:00 – Updated: 2024-08-07 22:15
VLAI
EPSS
Summary
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
50 references
Date Public
2005-06-06 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T22:15:37.335Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-4.html"
},
{
"name": "30908",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30908"
},
{
"name": "[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"name": "ADV-2007-2732",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"name": "13873",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13873"
},
{
"name": "239312",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"name": "ADV-2007-3087",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"name": "30899",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30899"
},
{
"name": "29242",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29242"
},
{
"name": "ADV-2008-1979",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"name": "APPLE-SA-2007-07-31",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"name": "ADV-2008-0065",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"name": "SUSE-SR:2008:005",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"name": "33668",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33668"
},
{
"name": "20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"name": "RHSA-2007:0360",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"name": "ADV-2009-0233",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"name": "oval:org.mitre.oval:def:10499",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"name": "28365",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28365"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "ADV-2007-3386",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"name": "RHSA-2007:0327",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"name": "27037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27037"
},
{
"name": "1014365",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1014365"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"name": "SSRT071447",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "HPSBUX02262",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tomcat.apache.org/security-5.html"
},
{
"name": "25159",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/25159"
},
{
"name": "26660",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/26660"
},
{
"name": "RHSA-2008:0261",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"name": "20050606 A new whitepaper by Watchfire - HTTP Request Smuggling",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"name": "26235",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/26235"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-06-06T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-02-13T16:09:41.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-4.html"
},
{
"name": "30908",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30908"
},
{
"name": "[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"name": "ADV-2007-2732",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"name": "13873",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13873"
},
{
"name": "239312",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"name": "ADV-2007-3087",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"name": "30899",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30899"
},
{
"name": "29242",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29242"
},
{
"name": "ADV-2008-1979",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"name": "APPLE-SA-2007-07-31",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"name": "ADV-2008-0065",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"name": "SUSE-SR:2008:005",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"name": "33668",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33668"
},
{
"name": "20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"name": "RHSA-2007:0360",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"name": "ADV-2009-0233",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"name": "oval:org.mitre.oval:def:10499",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"name": "28365",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28365"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "ADV-2007-3386",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"name": "RHSA-2007:0327",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"name": "27037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27037"
},
{
"name": "1014365",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1014365"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"name": "SSRT071447",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "HPSBUX02262",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tomcat.apache.org/security-5.html"
},
{
"name": "25159",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/25159"
},
{
"name": "26660",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/26660"
},
{
"name": "RHSA-2008:0261",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"name": "20050606 A new whitepaper by Watchfire - HTTP Request Smuggling",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"name": "26235",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/26235"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2090",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html",
"refsource": "CONFIRM",
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"name": "http://tomcat.apache.org/security-4.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-4.html"
},
{
"name": "30908",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30908"
},
{
"name": "[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "MLIST",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"name": "ADV-2007-2732",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"name": "13873",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13873"
},
{
"name": "239312",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"name": "ADV-2007-3087",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"name": "30899",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30899"
},
{
"name": "29242",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29242"
},
{
"name": "ADV-2008-1979",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"name": "APPLE-SA-2007-07-31",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"name": "ADV-2008-0065",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"name": "SUSE-SR:2008:005",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"name": "33668",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33668"
},
{
"name": "20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"name": "RHSA-2007:0360",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"name": "ADV-2009-0233",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"name": "oval:org.mitre.oval:def:10499",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"name": "28365",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28365"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"name": "http://tomcat.apache.org/security-6.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "ADV-2007-3386",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"name": "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
"refsource": "MISC",
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"name": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
"refsource": "MISC",
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"name": "RHSA-2007:0327",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"name": "27037",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27037"
},
{
"name": "1014365",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014365"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=306172",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"name": "SSRT071447",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "HPSBUX02262",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "http://tomcat.apache.org/security-5.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"name": "25159",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25159"
},
{
"name": "26660",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26660"
},
{
"name": "RHSA-2008:0261",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"name": "20050606 A new whitepaper by Watchfire - HTTP Request Smuggling",
"refsource": "BUGTRAQ",
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
"refsource": "CONFIRM",
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
"refsource": "CONFIRM",
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"name": "26235",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26235"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-2090",
"datePublished": "2005-06-30T04:00:00.000Z",
"dateReserved": "2005-06-30T00:00:00.000Z",
"dateUpdated": "2024-08-07T22:15:37.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2005-2090",
"date": "2026-05-28",
"epss": "0.71377",
"percentile": "0.98742"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2005-2090\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2005-07-05T04:00:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \\\"Transfer-Encoding: chunked\\\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \\\"HTTP Request Smuggling.\\\"\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EB2F3D8-25A1-408E-80D0-59D52A901284\"}]}]}],\"references\":[{\"url\":\"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=306172\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.vmware.com/pipermail/security-announce/2008/000003.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/lists/bugtraq/2005/Jun/0025.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/26235\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/26660\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/27037\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28365\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29242\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30899\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30908\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/33668\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1014365\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-4.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-5.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0327.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0360.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0261.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securiteam.com/securityreviews/5GP0220G0U.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/485938/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/500396/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/500412/100/0/threaded\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/13873\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/25159\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/2732\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3087\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3386\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0065\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1979/references\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/0233\",\"source\":\"cve@mitre.org\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://docs.info.apple.com/article.html?artnum=306172\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.vmware.com/pipermail/security-announce/2008/000003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/lists/bugtraq/2005/Jun/0025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/26235\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/26660\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/27037\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/28365\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/29242\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30899\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/30908\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/33668\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\"]},{\"url\":\"http://securitytracker.com/id?1014365\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-4.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-5.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0327.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2007-0360.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0261.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securiteam.com/securityreviews/5GP0220G0U.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/485938/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/500396/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/archive/1/500412/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/13873\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/25159\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/2732\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3087\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2007/3386\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/0065\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/1979/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/0233\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTA-2007-AVI-340
Vulnerability from certfr_avis - Published: 2007-08-01 - Updated: 2007-08-01
Plusieurs vulnérabilités ont été identifiées : elles concernent le système d'exploitation Mac OS X. L'exploitation de ces dernières peut avoir des conséquences variées, comme l'exécution de code arbitraire, ou un dysfonctionnement du système vulnérable.
Description
Plusieurs vulnérabilités ont été identifiées dans le système d'exploitation Mac OS X. Parmi celles-ci :
- bzip2 : un nom d'archive malicieusement formé permet l'exécution de code arbitraire à distance ;
- CFNetwork : un clic sur une addresse malicieusement formée permet l'exécution de commandes FTP arbitraires à distance ;
- CoreAudio : une page Web malicieusement créée permet à l'aide d'une applet Java d'exécuter du code arbitraire à distance;
- cscope : des vulnérabilités concernant un dépassement de mémoire et la création de fichiers temporaires dangereux ont été corrigées ;
- gnuzip : un nom d'archive malicieusement formé permet l'exécution de code arbitraire à distance ;
- iChat : un dépassement de mémoire permet de provoquer un déni de service à distance ou l'exécution de code arbitraire à distance au sein d'un même sous réseau ;
- Kerberos : des vulnérabilités pouvant provoquer un déni de service ou l'exécution de code arbitraire à distance ont été corrigées ;
- mDNSResponder : un dépassement de mémoire permet de provoquer un déni de service à distance ou l'exécution de code arbitraire à distance au sein d'un même sous réseau ;
- PDFKit : l'ouverture d'un document malicieusement créé permet un déni de service de l'application ou l'exécution de code arbitraire ;
- PHP : plusieurs vulnérabilités touchant PHP 4.4.4 ont été corrigées ;
- Quartz Composer : l'ouverture d'un fichier Quartz malicieusement créé permet un déni de service de l'application ou l'exécution de code arbitraire ;
- Samba : lorsque le partage de fichiers Windows est activé, un utilisateur non authentifié peut, à distance, provoquer un déni de service, exécuter du code ou des commandes arbitraires et contourner la politique de sécurité ;
- SquirrelMail : plusieurs vulnérabilités dont au moins une permettant une attaque de type cross-site scripting ont été corrigées ;
- Tomcat : plusieurs vulnérabilités dont certaines permettant des attaques de type cross-site scripting et l'atteinte à la confidentialité des données ont été corrigées ;
- WebCore : des vulnérabilités permettant l'exécution d'applets Java alors que celui-ci est désactivé et permettant la réalisation d'attaques de type cross-site scripting ont été corrigées ;
- WebKit : l'ouverture d'une page Web malicieusement créée permet l'exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple Mac OS X Server v10.3.9 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac OS X Server v10.4.10.",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac OS X v10.4.10 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Mac OS X v10.3.9 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans le syst\u00e8me\nd\u0027exploitation Mac OS X. Parmi celles-ci :\n\n- bzip2 : un nom d\u0027archive malicieusement form\u00e9 permet l\u0027ex\u00e9cution de\n code arbitraire \u00e0 distance ;\n- CFNetwork : un clic sur une addresse malicieusement form\u00e9e permet\n l\u0027ex\u00e9cution de commandes FTP arbitraires \u00e0 distance ;\n- CoreAudio : une page Web malicieusement cr\u00e9\u00e9e permet \u00e0 l\u0027aide d\u0027une\n applet Java d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance;\n- cscope : des vuln\u00e9rabilit\u00e9s concernant un d\u00e9passement de m\u00e9moire et\n la cr\u00e9ation de fichiers temporaires dangereux ont \u00e9t\u00e9 corrig\u00e9es ;\n- gnuzip : un nom d\u0027archive malicieusement form\u00e9 permet l\u0027ex\u00e9cution de\n code arbitraire \u00e0 distance ;\n- iChat : un d\u00e9passement de m\u00e9moire permet de provoquer un d\u00e9ni de\n service \u00e0 distance ou l\u0027ex\u00e9cution de code arbitraire \u00e0 distance au\n sein d\u0027un m\u00eame sous r\u00e9seau ;\n- Kerberos : des vuln\u00e9rabilit\u00e9s pouvant provoquer un d\u00e9ni de service\n ou l\u0027ex\u00e9cution de code arbitraire \u00e0 distance ont \u00e9t\u00e9 corrig\u00e9es ;\n- mDNSResponder : un d\u00e9passement de m\u00e9moire permet de provoquer un\n d\u00e9ni de service \u00e0 distance ou l\u0027ex\u00e9cution de code arbitraire \u00e0\n distance au sein d\u0027un m\u00eame sous r\u00e9seau ;\n- PDFKit : l\u0027ouverture d\u0027un document malicieusement cr\u00e9\u00e9 permet un\n d\u00e9ni de service de l\u0027application ou l\u0027ex\u00e9cution de code arbitraire ;\n- PHP : plusieurs vuln\u00e9rabilit\u00e9s touchant PHP 4.4.4 ont \u00e9t\u00e9 corrig\u00e9es\n ;\n- Quartz Composer : l\u0027ouverture d\u0027un fichier Quartz malicieusement\n cr\u00e9\u00e9 permet un d\u00e9ni de service de l\u0027application ou l\u0027ex\u00e9cution de\n code arbitraire ;\n- Samba : lorsque le partage de fichiers Windows est activ\u00e9, un\n utilisateur non authentifi\u00e9 peut, \u00e0 distance, provoquer un d\u00e9ni de\n service, ex\u00e9cuter du code ou des commandes arbitraires et contourner\n la politique de s\u00e9curit\u00e9 ;\n- SquirrelMail : plusieurs vuln\u00e9rabilit\u00e9s dont au moins une permettant\n une attaque de type cross-site scripting ont \u00e9t\u00e9 corrig\u00e9es ;\n- Tomcat : plusieurs vuln\u00e9rabilit\u00e9s dont certaines permettant des\n attaques de type cross-site scripting et l\u0027atteinte \u00e0 la\n confidentialit\u00e9 des donn\u00e9es ont \u00e9t\u00e9 corrig\u00e9es ;\n- WebCore : des vuln\u00e9rabilit\u00e9s permettant l\u0027ex\u00e9cution d\u0027applets Java\n alors que celui-ci est d\u00e9sactiv\u00e9 et permettant la r\u00e9alisation\n d\u0027attaques de type cross-site scripting ont \u00e9t\u00e9 corrig\u00e9es ;\n- WebKit : l\u0027ouverture d\u0027une page Web malicieusement cr\u00e9\u00e9e permet\n l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2005-0758",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-0758"
},
{
"name": "CVE-2007-2403",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2403"
},
{
"name": "CVE-2007-1583",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1583"
},
{
"name": "CVE-2007-2407",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2407"
},
{
"name": "CVE-2006-2842",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2842"
},
{
"name": "CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"name": "CVE-2007-1711",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1711"
},
{
"name": "CVE-2007-2409",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2409"
},
{
"name": "CVE-2007-2405",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2405"
},
{
"name": "CVE-2007-3944",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3944"
},
{
"name": "CVE-2007-1287",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1287"
},
{
"name": "CVE-2007-1262",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1262"
},
{
"name": "CVE-2007-2408",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2408"
},
{
"name": "CVE-2005-3128",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3128"
},
{
"name": "CVE-2007-1521",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1521"
},
{
"name": "CVE-2007-2446",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2446"
},
{
"name": "CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"name": "CVE-2007-1717",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1717"
},
{
"name": "CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"name": "CVE-2007-1001",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1001"
},
{
"name": "CVE-2007-0478",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0478"
},
{
"name": "CVE-2006-3174",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3174"
},
{
"name": "CVE-2007-3747",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3747"
},
{
"name": "CVE-2007-2406",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2406"
},
{
"name": "CVE-2007-3748",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3748"
},
{
"name": "CVE-2007-2442",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2442"
},
{
"name": "CVE-2007-3744",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3744"
},
{
"name": "CVE-2007-3745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3745"
},
{
"name": "CVE-2007-1460",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1460"
},
{
"name": "CVE-2007-2410",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2410"
},
{
"name": "CVE-2004-0996",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0996"
},
{
"name": "CVE-2006-6142",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6142"
},
{
"name": "CVE-2007-1860",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1860"
},
{
"name": "CVE-2007-2798",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2798"
},
{
"name": "CVE-2007-1461",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1461"
},
{
"name": "CVE-2007-3742",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3742"
},
{
"name": "CVE-2004-2541",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-2541"
},
{
"name": "CVE-2007-2404",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2404"
},
{
"name": "CVE-2007-2447",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2447"
},
{
"name": "CVE-2007-1484",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1484"
},
{
"name": "CVE-2006-4019",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4019"
},
{
"name": "CVE-2007-2589",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2589"
},
{
"name": "CVE-2007-2443",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2443"
},
{
"name": "CVE-2007-3746",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3746"
}
],
"initial_release_date": "2007-08-01T00:00:00",
"last_revision_date": "2007-08-01T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple 2007-007 306172 du 30 juillet 2007 :",
"url": "http://docs.info.apple.com/article.html?artnum=306172"
}
],
"reference": "CERTA-2007-AVI-340",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-08-01T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es : elles concernent le\nsyst\u00e8me d\u0027exploitation Mac OS X. L\u0027exploitation de ces derni\u00e8res peut\navoir des cons\u00e9quences vari\u00e9es, comme l\u0027ex\u00e9cution de code arbitraire, ou\nun dysfonctionnement du syst\u00e8me vuln\u00e9rable.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Mac OS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 Apple 2007-007 306172 du 30 juillet 2007",
"url": null
}
]
}
CERTA-2008-AVI-008
Vulnerability from certfr_avis - Published: 2008-01-08 - Updated: 2008-01-08
De multiples vulnérabilités sur VMWare ESX Server et VirtualCenter Management Server permettent notamment à une personne malintentionnée distante d'exécuter du code arbitraire.
Description
De multiples vulnérabilités existent sur VMWare ESX Server. Celles-ci concernent des modules ou logiciels utilisés par le serveur et récemment mis à jour : OpenPegasus, Tomcat, Samba, OpenSSL, JRE, util-linux, et Perl. Certaines de ces failles permettent notamment à une personne malintentionnée distante d'exécuter du code arbitraire.
Solution
Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "VirtualCenter Management Server 2.",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMWare ESX Server 2.0.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMWare ESX Server 3.0.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s existent sur VMWare ESX Server. Celles-ci\nconcernent des modules ou logiciels utilis\u00e9s par le serveur et r\u00e9cemment\nmis \u00e0 jour : OpenPegasus, Tomcat, Samba, OpenSSL, JRE, util-linux, et\nPerl. Certaines de ces failles permettent notamment \u00e0 une personne\nmalintentionn\u00e9e distante d\u0027ex\u00e9cuter du code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-5360",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5360"
},
{
"name": "CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"name": "CVE-2007-5135",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5135"
},
{
"name": "CVE-2007-5116",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5116"
},
{
"name": "CVE-2007-3004",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3004"
},
{
"name": "CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"name": "CVE-2007-5398",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5398"
},
{
"name": "CVE-2007-3108",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3108"
},
{
"name": "CVE-2007-4572",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4572"
},
{
"name": "CVE-2006-7195",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7195"
},
{
"name": "CVE-2007-5191",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5191"
}
],
"initial_release_date": "2008-01-08T00:00:00",
"last_revision_date": "2008-01-08T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 VMWare VMSA-2008-0002 du 07 janvier 2008 :",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 VMWare VMSA-2008-0001 du 07 janvier 2008 :",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000002.html"
}
],
"reference": "CERTA-2008-AVI-008",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-01-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s sur \u003cspan class=\"textit\"\u003eVMWare ESX\nServer\u003c/span\u003e et \u003cspan class=\"textit\"\u003eVirtualCenter Management\nServer\u003c/span\u003e permettent notamment \u00e0 une personne malintentionn\u00e9e\ndistante d\u0027ex\u00e9cuter du code arbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMWare VMSA-2008-0001 du 07 janvier 2008",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 VMWare VMSA-2008-0002 du 07 janvier 2008",
"url": null
}
]
}
CERTA-2008-AVI-349
Vulnerability from certfr_avis - Published: 2008-07-04 - Updated: 2008-07-04
Plusieurs vulnérabilités de Sun Solaris permettent à une personne malintentionnée d'effectuer, entre autres, un déni de service à distance.
Description
De multiples vulnérabilités non documentées du serveur Tomcat de Sun Solaris permettent à une personne malveillante d'effectuer un déni de service à distance, un courtournement de la politique de sécurité, une atteinte à la confidentialité des données ou une injection de code indirecte.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Sun Solaris 10.",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Sun Solaris 9 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s non document\u00e9es du serveur Tomcat de Sun\nSolaris permettent \u00e0 une personne malveillante d\u0027effectuer un d\u00e9ni de\nservice \u00e0 distance, un courtournement de la politique de s\u00e9curit\u00e9, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es ou une injection de code\nindirecte.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-2450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2450"
},
{
"name": "CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"name": "CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"name": "CVE-2007-5461",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-5461"
},
{
"name": "CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"name": "CVE-2002-2006",
"url": "https://www.cve.org/CVERecord?id=CVE-2002-2006"
},
{
"name": "CVE-2002-1394",
"url": "https://www.cve.org/CVERecord?id=CVE-2002-1394"
},
{
"name": "CVE-2005-3164",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3164"
},
{
"name": "CVE-2002-1148",
"url": "https://www.cve.org/CVERecord?id=CVE-2002-1148"
},
{
"name": "CVE-2005-3510",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3510"
},
{
"name": "CVE-2006-3835",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3835"
},
{
"name": "CVE-2003-0866",
"url": "https://www.cve.org/CVERecord?id=CVE-2003-0866"
},
{
"name": "CVE-2007-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1355"
}
],
"initial_release_date": "2008-07-04T00:00:00",
"last_revision_date": "2008-07-04T00:00:00",
"links": [],
"reference": "CERTA-2008-AVI-349",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-07-04T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s de \u003cspan class=\"textit\"\u003eSun Solaris\u003c/span\u003e\npermettent \u00e0 une personne malintentionn\u00e9e d\u0027effectuer, entre autres, un\nd\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Sun Solaris",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #239312 du 30 juin 2008",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-239312-1"
}
]
}
CERTA-2009-AVI-032
Vulnerability from certfr_avis - Published: 2009-01-28 - Updated: 2009-01-28
De multiples vulnérabilités affectent la version d'Apache Tomcat fournie avec CA Cohesion Application Configuration Manager.
Description
De multiples vulnérabilités affectent la version d'Apache Tomcat incluse dans CA Cohesion Application Configuration Manager. Ces vulnérabilités sont décrites dans les diverses références CVE (voir section Documentation) et permettent notamment de réaliser un déni de service à distance, d'injecter des scripts, d'afficher le contenu de certains fichiers, etc.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
CA Cohesion Application Configuration Manager version 4.5.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eCA Cohesion Application Configuration Manager\u003c/SPAN\u003e version 4.5.\u003c/P\u003e",
"content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s affectent la version d\u0027Apache Tomcat incluse\ndans CA Cohesion Application Configuration Manager. Ces vuln\u00e9rabilit\u00e9s\nsont d\u00e9crites dans les diverses r\u00e9f\u00e9rences CVE (voir section\nDocumentation) et permettent notamment de r\u00e9aliser un d\u00e9ni de service \u00e0\ndistance, d\u0027injecter des scripts, d\u0027afficher le contenu de certains\nfichiers, etc.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-2450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2450"
},
{
"name": "CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"name": "CVE-2008-0128",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0128"
},
{
"name": "CVE-2007-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1858"
},
{
"name": "CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"name": "CVE-2006-7196",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7196"
},
{
"name": "CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"name": "CVE-2007-3382",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3382"
},
{
"name": "CVE-2005-3510",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-3510"
},
{
"name": "CVE-2006-3835",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3835"
},
{
"name": "CVE-2007-3386",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3386"
},
{
"name": "CVE-2007-2449",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2449"
},
{
"name": "CVE-2007-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1355"
},
{
"name": "CVE-2006-7195",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7195"
},
{
"name": "CVE-2007-3385",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3385"
}
],
"initial_release_date": "2009-01-28T00:00:00",
"last_revision_date": "2009-01-28T00:00:00",
"links": [],
"reference": "CERTA-2009-AVI-032",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-01-28T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s affectent la version d\u0027\u003cspan\nclass=\"textit\"\u003eApache Tomcat\u003c/span\u003e fournie avec \u003cspan class=\"textit\"\u003eCA\nCohesion Application Configuration Manager\u003c/span\u003e.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans CA Cohesion Application Configuration Manager",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 CA20090123-01 du 26 janvier 2009",
"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
}
]
}
FKIE_CVE-2005-2090
Vulnerability from fkie_nvd - Published: 2005-07-05 04:00 - Updated: 2026-04-16 00:27
Severity
Summary
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
"matchCriteriaId": "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "9EB2F3D8-25A1-408E-80D0-59D52A901284",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
}
],
"id": "CVE-2005-2090",
"lastModified": "2026-04-16T00:27:16.627",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2005-07-05T04:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26235"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26660"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/27037"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28365"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29242"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30899"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30908"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/33668"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1014365"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-4.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-5.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/13873"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/25159"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"source": "cve@mitre.org",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26235"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26660"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/27037"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28365"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29242"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30899"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30908"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/33668"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1014365"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-4.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-5.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/13873"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/25159"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-F2GQ-P6QV-CCW4
Vulnerability from github – Published: 2022-05-01 02:04 – Updated: 2023-09-18 23:42
VLAI
Summary
Tomcat Vulnerable to Web Cache Poisoning
Details
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
{
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "5.0.0"
},
{
"last_affected": "5.0.19"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "4.0.0"
},
{
"last_affected": "4.1.24"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2005-2090"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": true,
"github_reviewed_at": "2023-09-18T23:42:52Z",
"nvd_published_at": "2005-07-05T04:00:00Z",
"severity": "MODERATE"
},
"details": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"id": "GHSA-f2gq-p6qv-ccw4",
"modified": "2023-09-18T23:42:52Z",
"published": "2022-05-01T02:04:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"type": "WEB",
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"type": "WEB",
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"type": "WEB",
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1014365"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"type": "WEB",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"type": "WEB",
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"type": "WEB",
"url": "http://tomcat.apache.org/security-4.html"
},
{
"type": "WEB",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"type": "WEB",
"url": "http://tomcat.apache.org/security-6.html"
},
{
"type": "WEB",
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"type": "WEB",
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/13873"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/25159"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Tomcat Vulnerable to Web Cache Poisoning"
}
GSD-2005-2090
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2005-2090",
"description": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"id": "GSD-2005-2090",
"references": [
"https://www.suse.com/security/cve/CVE-2005-2090.html",
"https://access.redhat.com/errata/RHSA-2010:0602",
"https://access.redhat.com/errata/RHSA-2008:0524",
"https://access.redhat.com/errata/RHSA-2008:0261",
"https://access.redhat.com/errata/RHSA-2007:1069",
"https://access.redhat.com/errata/RHSA-2007:0360",
"https://access.redhat.com/errata/RHSA-2007:0340",
"https://access.redhat.com/errata/RHSA-2007:0328",
"https://access.redhat.com/errata/RHSA-2007:0327",
"https://access.redhat.com/errata/RHSA-2007:0326",
"https://linux.oracle.com/cve/CVE-2005-2090.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2005-2090"
],
"details": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"id": "GSD-2005-2090",
"modified": "2023-12-13T01:20:10.850566Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2090",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html",
"refsource": "CONFIRM",
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"name": "http://tomcat.apache.org/security-4.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-4.html"
},
{
"name": "30908",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30908"
},
{
"name": "[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "MLIST",
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"name": "ADV-2007-2732",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"name": "13873",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13873"
},
{
"name": "239312",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"name": "ADV-2007-3087",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"name": "30899",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/30899"
},
{
"name": "29242",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29242"
},
{
"name": "ADV-2008-1979",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"name": "APPLE-SA-2007-07-31",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"name": "ADV-2008-0065",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"name": "SUSE-SR:2008:005",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"name": "33668",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33668"
},
{
"name": "20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"name": "RHSA-2007:0360",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"name": "ADV-2009-0233",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"name": "oval:org.mitre.oval:def:10499",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"name": "28365",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28365"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"name": "http://tomcat.apache.org/security-6.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "ADV-2007-3386",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"name": "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
"refsource": "MISC",
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"name": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
"refsource": "MISC",
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"name": "RHSA-2007:0327",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"name": "27037",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27037"
},
{
"name": "1014365",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1014365"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=306172",
"refsource": "CONFIRM",
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"name": "SSRT071447",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "HPSBUX02262",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "http://tomcat.apache.org/security-5.html",
"refsource": "CONFIRM",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"name": "25159",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25159"
},
{
"name": "26660",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26660"
},
{
"name": "RHSA-2008:0261",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"name": "20050606 A new whitepaper by Watchfire - HTTP Request Smuggling",
"refsource": "BUGTRAQ",
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
"refsource": "CONFIRM",
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
"refsource": "CONFIRM",
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"name": "26235",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26235"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-2090"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20050606 A new whitepaper by Watchfire - HTTP Request Smuggling",
"refsource": "BUGTRAQ",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/lists/bugtraq/2005/Jun/0025.html"
},
{
"name": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf"
},
{
"name": "http://www.securiteam.com/securityreviews/5GP0220G0U.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://www.securiteam.com/securityreviews/5GP0220G0U.html"
},
{
"name": "1014365",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://securitytracker.com/id?1014365"
},
{
"name": "http://tomcat.apache.org/security-4.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-4.html"
},
{
"name": "http://tomcat.apache.org/security-5.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-5.html"
},
{
"name": "http://tomcat.apache.org/security-6.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://tomcat.apache.org/security-6.html"
},
{
"name": "RHSA-2007:0327",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0327.html"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=306172",
"refsource": "CONFIRM",
"tags": [
"Broken Link"
],
"url": "http://docs.info.apple.com/article.html?artnum=306172"
},
{
"name": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://www.fujitsu.com/global/support/software/security/products-f/interstage-200703e.html"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm"
},
{
"name": "APPLE-SA-2007-07-31",
"refsource": "APPLE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html"
},
{
"name": "RHSA-2007:0360",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2007-0360.html"
},
{
"name": "25159",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/25159"
},
{
"name": "13873",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/13873"
},
{
"name": "26235",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26235"
},
{
"name": "26660",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/26660"
},
{
"name": "27037",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/27037"
},
{
"name": "[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000003.html"
},
{
"name": "28365",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/28365"
},
{
"name": "SUSE-SR:2008:005",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
},
{
"name": "29242",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/29242"
},
{
"name": "RHSA-2008:0261",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
},
{
"name": "239312",
"refsource": "SUNALERT",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"
},
{
"name": "30908",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30908"
},
{
"name": "30899",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/30899"
},
{
"name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
"refsource": "CONFIRM",
"tags": [
"Broken Link"
],
"url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
},
{
"name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
"refsource": "CONFIRM",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
},
{
"name": "33668",
"refsource": "SECUNIA",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/33668"
},
{
"name": "ADV-2009-0233",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2009/0233"
},
{
"name": "ADV-2007-3087",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3087"
},
{
"name": "ADV-2007-2732",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/2732"
},
{
"name": "ADV-2007-3386",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2007/3386"
},
{
"name": "ADV-2008-1979",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/1979/references"
},
{
"name": "ADV-2008-0065",
"refsource": "VUPEN",
"tags": [
"Permissions Required"
],
"url": "http://www.vupen.com/english/advisories/2008/0065"
},
{
"name": "SSRT071447",
"refsource": "HP",
"tags": [
"Broken Link"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
},
{
"name": "oval:org.mitre.oval:def:10499",
"refsource": "OVAL",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10499"
},
{
"name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
"refsource": "BUGTRAQ",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
},
{
"name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
},
{
"name": "20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1",
"refsource": "BUGTRAQ",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/archive/1/485938/100/0/threaded"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2019-04-15T16:29Z",
"publishedDate": "2005-07-05T04:00Z"
}
}
}
RHSA-2007:0326
Vulnerability from csaf_redhat - Published: 2007-05-21 12:13 - Updated: 2026-01-06 20:20Summary
Red Hat Security Advisory: tomcat security update
Severity
Important
Notes
Topic: Updated tomcat packages that fix multiple security issues are now available
for Red Hat Application Server v2.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details: Tomcat is a servlet container for Java Servlet and JavaServer Pages
technologies.
Tomcat was found to accept multiple content-length headers in a
request. This could allow attackers to poison a web-cache, bypass web
application firewall protection, or conduct cross-site scripting attacks.
(CVE-2005-2090)
Tomcat permitted various characters as path delimiters. If Tomcat was used
behind certain proxies and configured to only proxy some contexts, an
attacker could construct an HTTP request to work around the context
restriction and potentially access non-proxied content. (CVE-2007-0450)
Several applications distributed in the JSP examples displayed unfiltered
values. If the JSP examples are accessible, these flaws could allow a
remote attacker to perform cross-site scripting attacks. (CVE-2006-7195,
CVE-2006-7196)
The default Tomcat configuration permitted the use of insecure
SSL cipher suites including the anonymous cipher suite. (CVE-2007-1858)
Directory listings were enabled by default in Tomcat. Information stored
unprotected under the document root was visible to anyone if the
administrator did not disable directory listings. (CVE-2006-3835)
Users should upgrade to these erratum packages which contain Tomcat version
5.5.23 that resolves these issues. Updated jakarta-commons-modeler
packages are also included which correct a bug when used with Tomcat 5.5.23.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
No description is available for this CVE.
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
33 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat packages that fix multiple security issues are now available\nfor Red Hat Application Server v2.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Tomcat is a servlet container for Java Servlet and JavaServer Pages\ntechnologies.\n\nTomcat was found to accept multiple content-length headers in a\nrequest. This could allow attackers to poison a web-cache, bypass web\napplication firewall protection, or conduct cross-site scripting attacks. \n(CVE-2005-2090)\n\nTomcat permitted various characters as path delimiters. If Tomcat was used\nbehind certain proxies and configured to only proxy some contexts, an\nattacker could construct an HTTP request to work around the context\nrestriction and potentially access non-proxied content. (CVE-2007-0450)\n\nSeveral applications distributed in the JSP examples displayed unfiltered\nvalues. If the JSP examples are accessible, these flaws could allow a\nremote attacker to perform cross-site scripting attacks. (CVE-2006-7195,\nCVE-2006-7196)\n\nThe default Tomcat configuration permitted the use of insecure\nSSL cipher suites including the anonymous cipher suite. (CVE-2007-1858)\n\nDirectory listings were enabled by default in Tomcat. Information stored\nunprotected under the document root was visible to anyone if the\nadministrator did not disable directory listings. (CVE-2006-3835)\n\nUsers should upgrade to these erratum packages which contain Tomcat version\n5.5.23 that resolves these issues. Updated jakarta-commons-modeler\npackages are also included which correct a bug when used with Tomcat 5.5.23.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2007:0326",
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-5.html",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"category": "external",
"summary": "237086",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237086"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0326.json"
}
],
"title": "Red Hat Security Advisory: tomcat security update",
"tracking": {
"current_release_date": "2026-01-06T20:20:30+00:00",
"generator": {
"date": "2026-01-06T20:20:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.14"
}
},
"id": "RHSA-2007:0326",
"initial_release_date": "2007-05-21T12:13:00+00:00",
"revision_history": [
{
"date": "2007-05-21T12:13:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2007-05-21T08:13:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-06T20:20:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Application Server v2 4AS",
"product": {
"name": "Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_application_server:2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Application Server v2 4ES",
"product": {
"name": "Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_application_server:2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Application Server v2 4WS",
"product": {
"name": "Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_application_server:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Application Server"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"product_id": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@2.0-3jpp_2rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"product": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"product_id": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@2.0-3jpp_2rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp_4rh.3?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"product": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"product_id": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@2.0-3jpp_2rh?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"product": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"product_id": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.src as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4AS",
"product_id": "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4AS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.src as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4ES",
"product_id": "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4ES-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_4rh.3.src as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_4rh.3.src",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch as a component of Red Hat Application Server v2 4WS",
"product_id": "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"relates_to_product_reference": "4WS-RHAPS2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-2090",
"discovery_date": "2005-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237079"
}
],
"notes": [
{
"category": "description",
"text": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat multiple content-length header poisioning",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-2090"
},
{
"category": "external",
"summary": "RHBZ#237079",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237079"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090"
}
],
"release_date": "2005-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat multiple content-length header poisioning"
},
{
"cve": "CVE-2006-3835",
"discovery_date": "2006-07-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237084"
}
],
"notes": [
{
"category": "description",
"text": "No description is available for this CVE.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat directory listing issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is not a security issue in Tomcat itself, but is caused when directory listings are enabled.\n\nDetails on how to disable directory listings are available at: http://tomcat.apache.org/faq/misc.html#listing",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-3835"
},
{
"category": "external",
"summary": "RHBZ#237084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237084"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-3835",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3835"
}
],
"release_date": "2006-07-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat directory listing issue"
},
{
"cve": "CVE-2006-7195",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237081"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat XSS in example webapps",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-7195"
},
{
"category": "external",
"summary": "RHBZ#237081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-7195",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195"
}
],
"release_date": "2007-04-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat XSS in example webapps"
},
{
"cve": "CVE-2006-7196",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "238131"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat XSS in example webapps",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-7196"
},
{
"category": "external",
"summary": "RHBZ#238131",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=238131"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-7196",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7196"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-7196",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-7196"
}
],
"release_date": "2007-04-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat XSS in example webapps"
},
{
"cve": "CVE-2007-0450",
"discovery_date": "2007-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237080"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) \"/\" (slash), (2) \"\\\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat directory traversal",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-0450"
},
{
"category": "external",
"summary": "RHBZ#237080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450"
}
],
"release_date": "2007-03-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tomcat directory traversal"
},
{
"cve": "CVE-2007-1358",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "244803"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted \"Accept-Language headers that do not conform to RFC 2616\".",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat accept-language xss flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-1358"
},
{
"category": "external",
"summary": "RHBZ#244803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=244803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358"
}
],
"release_date": "2007-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat accept-language xss flaw"
},
{
"cve": "CVE-2007-1858",
"discovery_date": "2007-04-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237083"
}
],
"notes": [
{
"category": "description",
"text": "The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat anonymous cipher issue",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-1858"
},
{
"category": "external",
"summary": "RHBZ#237083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1858"
}
],
"release_date": "2007-04-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-21T12:13:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4AS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4ES-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:jakarta-commons-modeler-0:2.0-3jpp_2rh.src",
"4WS-RHAPS2:jakarta-commons-modeler-javadoc-0:2.0-3jpp_2rh.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.3.src",
"4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.3.noarch",
"4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0326"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat anonymous cipher issue"
}
]
}
RHSA-2007:0327
Vulnerability from csaf_redhat - Published: 2007-05-14 16:59 - Updated: 2025-11-21 17:31Summary
Red Hat Security Advisory: tomcat security update
Severity
Important
Notes
Topic: Updated tomcat packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details: Tomcat is a servlet container for Java Servlet and JavaServer Pages
technologies.
Tomcat was found to accept multiple content-length headers in a
request. This could allow attackers to poison a web-cache, bypass web
application firewall protection, or conduct cross-site scripting attacks.
(CVE-2005-2090)
Tomcat permitted various characters as path delimiters. If Tomcat was used
behind certain proxies and configured to only proxy some contexts, an
attacker could construct an HTTP request to work around the context
restriction and potentially access non-proxied content. (CVE-2007-0450)
The implict-objects.jsp file distributed in the examples webapp displayed a
number of unfiltered header values. If the JSP examples were accessible,
this flaw could allow a remote attacker to perform cross-site scripting
attacks. (CVE-2006-7195)
Users should upgrade to these erratum packages which contain an update to
Tomcat that resolves these issues. Updated jakarta-commons-modeler
packages are also included which correct a bug when used with Tomcat 5.5.23.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Affected products
Fixed
221 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
221 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
Affected products
Fixed
221 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
221 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Tomcat is a servlet container for Java Servlet and JavaServer Pages\ntechnologies.\n\nTomcat was found to accept multiple content-length headers in a\nrequest. This could allow attackers to poison a web-cache, bypass web\napplication firewall protection, or conduct cross-site scripting attacks. \n(CVE-2005-2090)\n\nTomcat permitted various characters as path delimiters. If Tomcat was used\nbehind certain proxies and configured to only proxy some contexts, an\nattacker could construct an HTTP request to work around the context\nrestriction and potentially access non-proxied content. (CVE-2007-0450)\n\nThe implict-objects.jsp file distributed in the examples webapp displayed a\nnumber of unfiltered header values. If the JSP examples were accessible,\nthis flaw could allow a remote attacker to perform cross-site scripting\nattacks. (CVE-2006-7195)\n\nUsers should upgrade to these erratum packages which contain an update to\nTomcat that resolves these issues. Updated jakarta-commons-modeler\npackages are also included which correct a bug when used with Tomcat 5.5.23.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2007:0327",
"url": "https://access.redhat.com/errata/RHSA-2007:0327"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-5.html",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"category": "external",
"summary": "237089",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237089"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0327.json"
}
],
"title": "Red Hat Security Advisory: tomcat security update",
"tracking": {
"current_release_date": "2025-11-21T17:31:33+00:00",
"generator": {
"date": "2025-11-21T17:31:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2007:0327",
"initial_release_date": "2007-05-14T16:59:00+00:00",
"revision_history": [
{
"date": "2007-05-14T16:59:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2007-05-14T12:59:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:31:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.1.0.3.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"product": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_id": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-debuginfo@1.1-8jpp.1.0.2.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_id": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@1.1-8jpp.1.0.2.el5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.1.0.3.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"product": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"product_id": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-debuginfo@1.1-8jpp.1.0.2.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"product_id": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@1.1-8jpp.1.0.2.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.1.0.3.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"product": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"product_id": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-debuginfo@1.1-8jpp.1.0.2.el5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"product_id": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@1.1-8jpp.1.0.2.el5?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.1.0.3.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"product": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"product_id": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-debuginfo@1.1-8jpp.1.0.2.el5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"product_id": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@1.1-8jpp.1.0.2.el5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.1.0.3.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"product": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"product_id": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@1.1-8jpp.1.0.2.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"product": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"product_id": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-debuginfo@1.1-8jpp.1.0.2.el5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"product": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"product_id": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler-javadoc@1.1-8jpp.1.0.2.el5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64"
},
"product_reference": "jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"relates_to_product_reference": "5Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
},
"product_reference": "tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"relates_to_product_reference": "5Server"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-2090",
"discovery_date": "2005-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237079"
}
],
"notes": [
{
"category": "description",
"text": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat multiple content-length header poisioning",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-2090"
},
{
"category": "external",
"summary": "RHBZ#237079",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237079"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090"
}
],
"release_date": "2005-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-14T16:59:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0327"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat multiple content-length header poisioning"
},
{
"cve": "CVE-2006-7195",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237081"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat XSS in example webapps",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-7195"
},
{
"category": "external",
"summary": "RHBZ#237081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-7195",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195"
}
],
"release_date": "2007-04-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-14T16:59:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0327"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat XSS in example webapps"
},
{
"cve": "CVE-2007-0450",
"discovery_date": "2007-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237080"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) \"/\" (slash), (2) \"\\\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat directory traversal",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-0450"
},
{
"category": "external",
"summary": "RHBZ#237080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450"
}
],
"release_date": "2007-03-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-14T16:59:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0327"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tomcat directory traversal"
},
{
"cve": "CVE-2007-1358",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "244803"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted \"Accept-Language headers that do not conform to RFC 2616\".",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat accept-language xss flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-1358"
},
{
"category": "external",
"summary": "RHBZ#244803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=244803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358"
}
],
"release_date": "2007-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-14T16:59:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Client-Workstation:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Client-Workstation:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client-Workstation:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Client:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Client:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.src",
"5Server:jakarta-commons-modeler-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-debuginfo-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.i386",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ia64",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.ppc",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.s390x",
"5Server:jakarta-commons-modeler-javadoc-0:1.1-8jpp.1.0.2.el5.x86_64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.src",
"5Server:tomcat5-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-common-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.ppc64",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-debuginfo-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-server-lib-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.1.0.3.el5.x86_64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.i386",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ia64",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.ppc",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.s390x",
"5Server:tomcat5-webapps-0:5.5.23-0jpp.1.0.3.el5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0327"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat accept-language xss flaw"
}
]
}
RHSA-2007:0328
Vulnerability from csaf_redhat - Published: 2007-05-24 09:36 - Updated: 2025-11-21 17:31Summary
Red Hat Security Advisory: tomcat security update
Severity
Important
Notes
Topic: Updated tomcat packages that fix multiple security issues and a bug are now
available for Red Hat Developer Suite 3.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details: Tomcat is a servlet container for Java Servlet and JavaServer Pages
technologies.
Tomcat was found to accept multiple content-length headers in a
request. This could allow attackers to poison a web-cache, bypass web
application firewall protection, or conduct cross-site scripting attacks.
(CVE-2005-2090)
Tomcat permitted various characters as path delimiters. If Tomcat was used
behind certain proxies and configured to only proxy some contexts, an
attacker could construct an HTTP request to work around the context
restriction and potentially access non-proxied content. (CVE-2007-0450)
The implict-objects.jsp file distributed in the examples webapp displayed a
number of unfiltered header values. If the JSP examples are accessible,
this flaw could allow a remote attacker to perform cross-site scripting
attacks. (CVE-2006-7195)
Updated jakarta-commons-modeler packages which correct a bug when
used with Tomcat 5.5.23 are also included.
Users should upgrade to these erratum packages which contain an update to
Tomcat that resolves these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Affected products
Fixed
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
Affected products
Fixed
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated tomcat packages that fix multiple security issues and a bug are now\navailable for Red Hat Developer Suite 3.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "Tomcat is a servlet container for Java Servlet and JavaServer Pages\ntechnologies.\n\nTomcat was found to accept multiple content-length headers in a\nrequest. This could allow attackers to poison a web-cache, bypass web\napplication firewall protection, or conduct cross-site scripting attacks. \n(CVE-2005-2090)\n\nTomcat permitted various characters as path delimiters. If Tomcat was used\nbehind certain proxies and configured to only proxy some contexts, an\nattacker could construct an HTTP request to work around the context\nrestriction and potentially access non-proxied content. (CVE-2007-0450)\n\nThe implict-objects.jsp file distributed in the examples webapp displayed a\nnumber of unfiltered header values. If the JSP examples are accessible,\nthis flaw could allow a remote attacker to perform cross-site scripting\nattacks. (CVE-2006-7195)\n\nUpdated jakarta-commons-modeler packages which correct a bug when\nused with Tomcat 5.5.23 are also included.\n\nUsers should upgrade to these erratum packages which contain an update to\nTomcat that resolves these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2007:0328",
"url": "https://access.redhat.com/errata/RHSA-2007:0328"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "http://tomcat.apache.org/security-5.html",
"url": "http://tomcat.apache.org/security-5.html"
},
{
"category": "external",
"summary": "237109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237109"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0328.json"
}
],
"title": "Red Hat Security Advisory: tomcat security update",
"tracking": {
"current_release_date": "2025-11-21T17:31:33+00:00",
"generator": {
"date": "2025-11-21T17:31:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2007:0328",
"initial_release_date": "2007-05-24T09:36:00+00:00",
"revision_history": [
{
"date": "2007-05-24T09:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2007-05-24T05:36:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:31:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Suite v.3 (AS v.4)",
"product": {
"name": "Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_developer_suite:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Suite v.3"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"product": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"product_id": "jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@2.0-3jpp_3rh?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp_6rh.src",
"product": {
"name": "tomcat5-0:5.5.23-0jpp_6rh.src",
"product_id": "tomcat5-0:5.5.23-0jpp_6rh.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_6rh?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"product": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"product_id": "jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jakarta-commons-modeler@2.0-3jpp_3rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp_6rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp_6rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp_6rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp_6rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_6rh?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"product": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"product_id": "tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp_6rh?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jakarta-commons-modeler-0:2.0-3jpp_3rh.src as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src"
},
"product_reference": "jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-0:5.5.23-0jpp_6rh.src as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src"
},
"product_reference": "tomcat5-0:5.5.23-0jpp_6rh.src",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch as a component of Red Hat Developer Suite v.3 (AS v.4)",
"product_id": "4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
},
"product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch",
"relates_to_product_reference": "4AS-DS3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2005-2090",
"discovery_date": "2005-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237079"
}
],
"notes": [
{
"category": "description",
"text": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat multiple content-length header poisioning",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2005-2090"
},
{
"category": "external",
"summary": "RHBZ#237079",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237079"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2005-2090",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2090"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2090"
}
],
"release_date": "2005-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-24T09:36:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0328"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat multiple content-length header poisioning"
},
{
"cve": "CVE-2006-7195",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237081"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat XSS in example webapps",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-7195"
},
{
"category": "external",
"summary": "RHBZ#237081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-7195",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-7195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-7195"
}
],
"release_date": "2007-04-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-24T09:36:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0328"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "tomcat XSS in example webapps"
},
{
"cve": "CVE-2007-0450",
"discovery_date": "2007-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "237080"
}
],
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) \"/\" (slash), (2) \"\\\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat directory traversal",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-0450"
},
{
"category": "external",
"summary": "RHBZ#237080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0450"
}
],
"release_date": "2007-03-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-24T09:36:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0328"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "tomcat directory traversal"
},
{
"cve": "CVE-2007-1358",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2007-04-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "244803"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted \"Accept-Language headers that do not conform to RFC 2616\".",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat accept-language xss flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-1358"
},
{
"category": "external",
"summary": "RHBZ#244803",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=244803"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-1358",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1358"
}
],
"release_date": "2007-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-05-24T09:36:00+00:00",
"details": "Note: /etc/tomcat5/web.xml has been updated to disable directory listing by\ndefault. If you have previously modified /etc/tomcat5/web.xml, this change\nwill not be made automatically and you should manually update the value for\nthe \"listings\" parameter to \"false\". \n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.noarch",
"4AS-DS3:jakarta-commons-modeler-0:2.0-3jpp_3rh.src",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-0:5.5.23-0jpp_6rh.src",
"4AS-DS3:tomcat5-common-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jasper-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-server-lib-0:5.5.23-0jpp_6rh.noarch",
"4AS-DS3:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_6rh.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0328"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat accept-language xss flaw"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…