Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2009-0781
Vulnerability from cvelistv5
Published
2009-03-09 21:00
Modified
2024-08-07 04:48
Severity ?
EPSS score ?
Summary
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T04:48:52.130Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://tomcat.apache.org/security-4.html", }, { name: "HPSBMA02535", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "MDVSA-2009:138", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { name: "oval:org.mitre.oval:def:6564", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { name: "FEDORA-2009-11356", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { name: "DSA-2207", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2011/dsa-2207", }, { name: "HPSBUX02860", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "tomcat-cal2-xss(49213)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { name: "37460", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/37460", }, { name: "ADV-2010-3056", tags: [ "vdb-entry", "x_refsource_VUPEN", "x_transferred", ], url: "http://www.vupen.com/english/advisories/2010/3056", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { name: "35788", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/35788", }, { name: "SSRT100029", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "APPLE-SA-2010-03-29-1", tags: [ "vendor-advisory", "x_refsource_APPLE", "x_transferred", ], url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { name: "HPSBOV02762", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "ADV-2009-1856", tags: [ "vdb-entry", "x_refsource_VUPEN", "x_transferred", ], url: "http://www.vupen.com/english/advisories/2009/1856", }, { name: "oval:org.mitre.oval:def:11041", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { name: "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { name: "42368", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/42368", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://tomcat.apache.org/security-6.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://support.apple.com/kb/HT4077", }, { name: "FEDORA-2009-11374", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { name: "35685", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/35685", }, { name: "oval:org.mitre.oval:def:19345", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { name: "SSRT100825", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "FEDORA-2009-11352", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://tomcat.apache.org/security-5.html", }, { name: "SUSE-SR:2009:012", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { name: "HPSBUX02579", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "SSRT101146", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "MDVSA-2009:136", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { name: "263529", tags: [ "vendor-advisory", "x_refsource_SUNALERT", "x_transferred", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { name: "SSRT100203", tags: [ "vendor-advisory", "x_refsource_HP", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "ADV-2009-3316", tags: [ "vdb-entry", "x_refsource_VUPEN", "x_transferred", ], url: "http://www.vupen.com/english/advisories/2009/3316", }, { name: "20090306 [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { name: "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2009-03-06T00:00:00", descriptions: [ { lang: "en", value: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-02-13T16:08:44", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "http://tomcat.apache.org/security-4.html", }, { name: "HPSBMA02535", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "MDVSA-2009:138", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { name: "oval:org.mitre.oval:def:6564", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { name: "FEDORA-2009-11356", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { name: "DSA-2207", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2011/dsa-2207", }, { name: "HPSBUX02860", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "tomcat-cal2-xss(49213)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { name: "37460", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/37460", }, { name: "ADV-2010-3056", tags: [ "vdb-entry", "x_refsource_VUPEN", ], url: "http://www.vupen.com/english/advisories/2010/3056", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { name: "35788", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/35788", }, { name: "SSRT100029", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "APPLE-SA-2010-03-29-1", tags: [ "vendor-advisory", "x_refsource_APPLE", ], url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { name: "HPSBOV02762", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "ADV-2009-1856", tags: [ "vdb-entry", "x_refsource_VUPEN", ], url: "http://www.vupen.com/english/advisories/2009/1856", }, { name: "oval:org.mitre.oval:def:11041", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { name: "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { name: "42368", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/42368", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://tomcat.apache.org/security-6.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://support.apple.com/kb/HT4077", }, { name: "FEDORA-2009-11374", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { name: "35685", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/35685", }, { name: "oval:org.mitre.oval:def:19345", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { name: "SSRT100825", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "FEDORA-2009-11352", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://tomcat.apache.org/security-5.html", }, { name: "SUSE-SR:2009:012", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { name: "HPSBUX02579", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "SSRT101146", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "MDVSA-2009:136", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { name: "263529", tags: [ "vendor-advisory", "x_refsource_SUNALERT", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { name: "SSRT100203", tags: [ "vendor-advisory", "x_refsource_HP", ], url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "ADV-2009-3316", tags: [ "vdb-entry", "x_refsource_VUPEN", ], url: "http://www.vupen.com/english/advisories/2009/3316", }, { name: "20090306 [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { name: "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { name: "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, ], }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2009-0781", datePublished: "2009-03-09T21:00:00", dateReserved: "2009-03-04T00:00:00", dateUpdated: "2024-08-07T04:48:52.130Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2009-0781\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2009-03-09T21:30:00.217\",\"lastModified\":\"2024-11-21T01:00:54.503\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \\\"invalid HTML.\\\"\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en jsp/cal/cal2.jsp en la aplicación 'calendar' de los ejemplos de aplicaciones Web de Apache Tomcat 4.1.0 a 4.1.39, 5.5.0 a 5.5.27 y 6.0.0 a 6.0.18 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'time', en relación a un \\\"HTML no válido.\\\"\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E300013-0CE7-4313-A553-74A6A247B3E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E08D7414-8D0C-45D6-8E87-679DF0201D55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60CFD9CA-1878-4C74-A9BD-5D581736E6B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7E52BE7-5281-4430-8846-E41CF34FC214\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02860646-1D72-4D9A-AE2A-5868C8EDB3AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BE4B9B5-9C2E-47E1-9483-88A17264594F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BE92A9B-4B8C-468E-9162-A56ED5313E17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE21D455-5B38-4B07-8E25-4EE782501EB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBDA8066-294D-431E-B026-C03707DFBCD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"084B3227-FE22-43E3-AE06-7BB257018690\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D536FF4-7582-4351-ABE3-876E20F8E7FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11DDD82E-5D83-4581-B2F3-F12655BBF817\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A0F0C91-171E-421D-BE86-11567DEFC7BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F22D2621-D305-43CE-B00D-9A7563B061F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F4245BA-B05C-49DE-B2E0-1E588209ED3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8633532B-9785-4259-8840-B08529E20DCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EA52901-2D16-4F7E-BF5E-780B42A55D6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8BF6952D-6308-4029-8B63-0BD9C648C60F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94941F86-0BBF-4F30-8F13-FB895A11ED69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17522878-4266-432A-859D-C02096C8AC0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"951FFCD7-EAC2-41E6-A53B-F90C540327E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF1F2738-C7D6-4206-9227-43F464887FF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98EEB6F2-A721-45CF-A856-0E01B043C317\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02FDE602-A56A-477E-B704-41AF92EEBB9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A28B11A-3BC7-41BC-8970-EE075B029F5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E98B82A-22E5-4E6C-90AE-56F5780EA147\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34672E90-C220-436B-9143-480941227933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92883AFA-A02F-41A5-9977-ABEAC8AD2970\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ACFB09F3-32D1-479C-8C39-D7329D9A6623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D56581E2-9ECD-426A-96D8-A9D958900AD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"717F6995-5AF0-484C-90C0-A82F25FD2E32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B0C01D5-773F-469C-9E69-170C2844AAA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F5CF79C-759B-4FF9-90EE-847264059E93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"357651FD-392E-4775-BF20-37A23B3ABAE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"585B9476-6B86-4809-9B9E-26112114CB59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6145036D-4FCE-4EBE-A137-BDFA69BA54F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E437055A-0A81-413F-AB08-0E9D0DC9EA30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9276A093-9C98-4617-9941-2276995F5848\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C98575E2-E39A-4A8F-B5B5-BD280B8367BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5878E08E-2741-4798-94E9-BA8E07386B12\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69F6BAB7-C099-4345-A632-7287AEA555B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3AAF031-D16B-4D51-9581-2D1376A5157B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51120689-F5C0-4DF1-91AA-314C40A46C58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F67477AB-85F6-421C-9C0B-C8EFB1B200CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49E3C039-A949-4F1B-892A-57147EECB249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F28C7801-41B9-4552-BA1E-577967BCBBEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25B21085-7259-4685-9D1F-FF98E6489E10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"635EE321-2A1F-4FF8-95BE-0C26591969D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C95ADA4-66F5-45C4-A677-ACE22367A75A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11951A10-39A2-4FF5-8C43-DF94730FB794\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"351E5BCF-A56B-4D91-BA3C-21A4B77D529A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DC2BBB4-171E-4EFF-A575-A5B7FF031755\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B6B0504-27C1-4824-A928-A878CBBAB32D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D903956B-14F5-4177-AF12-0A5F1846D3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81F847DC-A2F5-456C-9038-16A0E85F4C3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD\"}]}]}],\"references\":[{\"url\":\"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=127420533226623&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=127420533226623&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=129070310906557&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=129070310906557&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=133469267822771&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=133469267822771&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=136485229118404&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq&m=136485229118404&w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/35685\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/35788\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/37460\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/42368\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://support.apple.com/kb/HT4077\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://tomcat.apache.org/security-4.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-5.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2011/dsa-2207\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/501538/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/1856\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/3056\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/49213\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=127420533226623&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=127420533226623&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=129070310906557&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=129070310906557&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=133469267822771&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=133469267822771&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=136485229118404&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq&m=136485229118404&w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/35685\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/35788\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/37460\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/42368\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/kb/HT4077\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tomcat.apache.org/security-4.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-5.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tomcat.apache.org/security-6.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2011/dsa-2207\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/501538/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/507985/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vmware.com/security/advisories/VMSA-2009-0016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/1856\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2009/3316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/3056\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/49213\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\\n\\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\",\"lastModified\":\"2009-03-17T00:00:00\"}]}}", }, }
rhsa-2009:1562
Vulnerability from csaf_redhat
Published
2009-11-09 15:26
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Application Server v2.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: With this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Application Server v2.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: With this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1562", url: "https://access.redhat.com/errata/RHSA-2009:1562", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1562.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:20+00:00", generator: { date: "2024-12-15T18:14:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1562", initial_release_date: "2009-11-09T15:26:00+00:00", revision_history: [ { date: "2009-11-09T15:26:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-11-09T10:26:22+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Application Server v2 4AS", product: { name: "Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4ES", product: { name: "Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4WS", product: { name: "Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, ], category: "product_family", name: "Red Hat Application Server", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=src", }, }, }, ], category: "architecture", name: "src", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
RHSA-2009:1562
Vulnerability from csaf_redhat
Published
2009-11-09 15:26
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Application Server v2.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: With this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Application Server v2.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: With this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1562", url: "https://access.redhat.com/errata/RHSA-2009:1562", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1562.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:20+00:00", generator: { date: "2024-12-15T18:14:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1562", initial_release_date: "2009-11-09T15:26:00+00:00", revision_history: [ { date: "2009-11-09T15:26:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-11-09T10:26:22+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Application Server v2 4AS", product: { name: "Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4ES", product: { name: "Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4WS", product: { name: "Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, ], category: "product_family", name: "Red Hat Application Server", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=src", }, }, }, ], category: "architecture", name: "src", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
rhsa-2009_1164
Vulnerability from csaf_redhat
Published
2009-07-21 20:50
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: with this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: with this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1164", url: "https://access.redhat.com/errata/RHSA-2009:1164", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1164.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:07+00:00", generator: { date: "2024-12-15T18:14:07+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1164", initial_release_date: "2009-07-21T20:50:00+00:00", revision_history: [ { date: "2009-07-21T20:50:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-07-21T16:56:29+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:07+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
RHSA-2009:1164
Vulnerability from csaf_redhat
Published
2009-07-21 20:50
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: with this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: with this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1164", url: "https://access.redhat.com/errata/RHSA-2009:1164", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1164.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:07+00:00", generator: { date: "2024-12-15T18:14:07+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1164", initial_release_date: "2009-07-21T20:50:00+00:00", revision_history: [ { date: "2009-07-21T20:50:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-07-21T16:56:29+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:07+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
rhsa-2009_1562
Vulnerability from csaf_redhat
Published
2009-11-09 15:26
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Application Server v2.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: With this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Application Server v2.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0876 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: With this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1562", url: "https://access.redhat.com/errata/RHSA-2009:1562", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1562.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:20+00:00", generator: { date: "2024-12-15T18:14:20+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1562", initial_release_date: "2009-11-09T15:26:00+00:00", revision_history: [ { date: "2009-11-09T15:26:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-11-09T10:26:22+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:20+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Application Server v2 4AS", product: { name: "Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4ES", product: { name: "Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, { category: "product_name", name: "Red Hat Application Server v2 4WS", product: { name: "Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_application_server:2", }, }, }, ], category: "product_family", name: "Red Hat Application Server", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp_4rh.16?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_id: "tomcat5-0:5.5.23-0jpp_4rh.16.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh.16?arch=src", }, }, }, ], category: "architecture", name: "src", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4AS", product_id: "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4AS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4ES", product_id: "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4ES-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp_4rh.16.src as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", }, product_reference: "tomcat5-0:5.5.23-0jpp_4rh.16.src", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch as a component of Red Hat Application Server v2 4WS", product_id: "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", relates_to_product_reference: "4WS-RHAPS2", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-11-09T15:26:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1562", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4AS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4AS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4ES-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4ES-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-0:5.5.23-0jpp_4rh.16.src", "4WS-RHAPS2:tomcat5-admin-webapps-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-common-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jasper-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-server-lib-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp_4rh.16.noarch", "4WS-RHAPS2:tomcat5-webapps-0:5.5.23-0jpp_4rh.16.noarch", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
rhsa-2009:1164
Vulnerability from csaf_redhat
Published
2009-07-21 20:50
Modified
2024-12-15 18:14
Summary
Red Hat Security Advisory: tomcat security update
Notes
Topic
Updated tomcat packages that fix several security issues are now available
for Red Hat Enterprise Linux 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Apache Tomcat is a servlet container for the Java Servlet and JavaServer
Pages (JSP) technologies.
It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not
address all possible flaws in the way Tomcat handles certain characters and
character sequences in cookie values. A remote attacker could use this flaw
to obtain sensitive information, such as session IDs, and then use this
information for session hijacking attacks. (CVE-2007-5333)
Note: The fix for the CVE-2007-5333 flaw changes the default cookie
processing behavior: with this update, version 0 cookies that contain
values that must be quoted to be valid are automatically changed to version
1 cookies. To reactivate the previous, but insecure behavior, add the
following entry to the "/etc/tomcat5/catalina.properties" file:
org.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false
It was discovered that request dispatchers did not properly normalize user
requests that have trailing query strings, allowing remote attackers to
send specially-crafted requests that would cause an information leak.
(CVE-2008-5515)
A flaw was found in the way the Tomcat AJP (Apache JServ Protocol)
connector processes AJP connections. An attacker could use this flaw to
send specially-crafted requests that would cause a temporary denial of
service. (CVE-2009-0033)
It was discovered that the error checking methods of certain authentication
classes did not have sufficient error checking, allowing remote attackers
to enumerate (via brute force methods) usernames registered with
applications running on Tomcat when FORM-based authentication was used.
(CVE-2009-0580)
A cross-site scripting (XSS) flaw was found in the examples calendar
application. With some web browsers, remote attackers could use this flaw
to inject arbitrary web script or HTML via the "time" parameter.
(CVE-2009-0781)
It was discovered that web applications containing their own XML parsers
could replace the XML parser Tomcat uses to parse configuration files. A
malicious web application running on a Tomcat instance could read or,
potentially, modify the configuration and XML-based data of other web
applications deployed on the same Tomcat instance. (CVE-2009-0783)
Users of Tomcat should upgrade to these updated packages, which contain
backported patches to resolve these issues. Tomcat must be restarted for
this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Apache Tomcat is a servlet container for the Java Servlet and JavaServer\nPages (JSP) technologies.\n\nIt was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not\naddress all possible flaws in the way Tomcat handles certain characters and\ncharacter sequences in cookie values. A remote attacker could use this flaw\nto obtain sensitive information, such as session IDs, and then use this\ninformation for session hijacking attacks. (CVE-2007-5333)\n\nNote: The fix for the CVE-2007-5333 flaw changes the default cookie\nprocessing behavior: with this update, version 0 cookies that contain\nvalues that must be quoted to be valid are automatically changed to version\n1 cookies. To reactivate the previous, but insecure behavior, add the\nfollowing entry to the \"/etc/tomcat5/catalina.properties\" file:\n\norg.apache.tomcat.util.http.ServerCookie.VERSION_SWITCH=false\n\nIt was discovered that request dispatchers did not properly normalize user\nrequests that have trailing query strings, allowing remote attackers to\nsend specially-crafted requests that would cause an information leak.\n(CVE-2008-5515)\n\nA flaw was found in the way the Tomcat AJP (Apache JServ Protocol)\nconnector processes AJP connections. An attacker could use this flaw to\nsend specially-crafted requests that would cause a temporary denial of\nservice. (CVE-2009-0033)\n\nIt was discovered that the error checking methods of certain authentication\nclasses did not have sufficient error checking, allowing remote attackers\nto enumerate (via brute force methods) usernames registered with\napplications running on Tomcat when FORM-based authentication was used.\n(CVE-2009-0580)\n\nA cross-site scripting (XSS) flaw was found in the examples calendar\napplication. With some web browsers, remote attackers could use this flaw\nto inject arbitrary web script or HTML via the \"time\" parameter.\n(CVE-2009-0781)\n\nIt was discovered that web applications containing their own XML parsers\ncould replace the XML parser Tomcat uses to parse configuration files. A\nmalicious web application running on a Tomcat instance could read or,\npotentially, modify the configuration and XML-based data of other web\napplications deployed on the same Tomcat instance. (CVE-2009-0783)\n\nUsers of Tomcat should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Tomcat must be restarted for\nthis update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:1164", url: "https://access.redhat.com/errata/RHSA-2009:1164", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "http://tomcat.apache.org/security-5.html", url: "http://tomcat.apache.org/security-5.html", }, { category: "external", summary: "427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1164.json", }, ], title: "Red Hat Security Advisory: tomcat security update", tracking: { current_release_date: "2024-12-15T18:14:07+00:00", generator: { date: "2024-12-15T18:14:07+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2009:1164", initial_release_date: "2009-07-21T20:50:00+00:00", revision_history: [ { date: "2009-07-21T20:50:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-07-21T16:56:29+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-15T18:14:07+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, { category: "product_version", name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_id: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.7.el5_3.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", product_id: "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client-Workstation", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", }, product_reference: "tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2007-5333", discovery_date: "2008-01-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "427766", }, ], notes: [ { category: "description", text: "Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (\") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.", title: "Vulnerability description", }, { category: "summary", text: "Improve cookie parsing for tomcat5", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5333\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.", title: "Statement", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2007-5333", }, { category: "external", summary: "RHBZ#427766", url: "https://bugzilla.redhat.com/show_bug.cgi?id=427766", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2007-5333", url: "https://www.cve.org/CVERecord?id=CVE-2007-5333", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5333", }, ], release_date: "2008-02-11T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Low", }, ], title: "Improve cookie parsing for tomcat5", }, { cve: "CVE-2008-5515", discovery_date: "2009-06-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504753", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.", title: "Vulnerability description", }, { category: "summary", text: "tomcat request dispatcher information disclosure vulnerability", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-5515", }, { category: "external", summary: "RHBZ#504753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-5515", url: "https://www.cve.org/CVERecord?id=CVE-2008-5515", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-5515", }, ], release_date: "2009-06-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat request dispatcher information disclosure vulnerability", }, { cve: "CVE-2009-0033", discovery_date: "2009-01-26T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "493381", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Denial-Of-Service with AJP connection", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0033", }, { category: "external", summary: "RHBZ#493381", url: "https://bugzilla.redhat.com/show_bug.cgi?id=493381", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0033", url: "https://www.cve.org/CVERecord?id=CVE-2009-0033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0033", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "tomcat6 Denial-Of-Service with AJP connection", }, { cve: "CVE-2009-0580", discovery_date: "2009-06-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "503978", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.", title: "Vulnerability description", }, { category: "summary", text: "tomcat6 Information disclosure in authentication classes", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0580", }, { category: "external", summary: "RHBZ#503978", url: "https://bugzilla.redhat.com/show_bug.cgi?id=503978", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0580", url: "https://www.cve.org/CVERecord?id=CVE-2009-0580", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0580", }, ], release_date: "2009-06-03T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat6 Information disclosure in authentication classes", }, { cve: "CVE-2009-0781", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2009-03-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "489028", }, ], notes: [ { category: "description", text: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", title: "Vulnerability description", }, { category: "summary", text: "tomcat: XSS in Apache Tomcat calendar application", title: "Vulnerability summary", }, { category: "other", text: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { category: "external", summary: "RHBZ#489028", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0781", url: "https://www.cve.org/CVERecord?id=CVE-2009-0781", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, ], release_date: "2009-03-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat: XSS in Apache Tomcat calendar application", }, { cve: "CVE-2009-0783", discovery_date: "2009-06-04T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "504153", }, ], notes: [ { category: "description", text: "Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.", title: "Vulnerability description", }, { category: "summary", text: "tomcat XML parser information disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2009-0783", }, { category: "external", summary: "RHBZ#504153", url: "https://bugzilla.redhat.com/show_bug.cgi?id=504153", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2009-0783", url: "https://www.cve.org/CVERecord?id=CVE-2009-0783", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0783", }, ], release_date: "2009-06-04T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-07-21T20:50:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:1164", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "NONE", baseScore: 1.5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:L/AC:M/Au:S/C:P/I:N/A:N", version: "2.0", }, products: [ "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client-Workstation:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Client:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Client:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.src", "5Server:tomcat5-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-common-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.ppc64", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-server-lib-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.7.el5_3.2.x86_64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.i386", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ia64", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.ppc", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.s390x", "5Server:tomcat5-webapps-0:5.5.23-0jpp.7.el5_3.2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tomcat XML parser information disclosure", }, ], }
ghsa-j788-fx57-99wp
Vulnerability from github
Published
2022-05-02 03:18
Modified
2022-06-17 21:55
Summary
Cross-site scripting in Apache Tomcat
Details
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
{ affected: [ { package: { ecosystem: "Maven", name: "org.apache.tomcat:tomcat", }, ranges: [ { events: [ { introduced: "4.1.0", }, { last_affected: "4.1.39", }, ], type: "ECOSYSTEM", }, ], }, { package: { ecosystem: "Maven", name: "org.apache.tomcat:tomcat", }, ranges: [ { events: [ { introduced: "5.5.0", }, { last_affected: "5.5.27", }, ], type: "ECOSYSTEM", }, ], }, { database_specific: { last_known_affected_version_range: "<= 6.0.18", }, package: { ecosystem: "Maven", name: "org.apache.tomcat:tomcat", }, ranges: [ { events: [ { introduced: "6.0.0", }, { fixed: "6.0.20", }, ], type: "ECOSYSTEM", }, ], }, ], aliases: [ "CVE-2009-0781", ], database_specific: { cwe_ids: [ "CWE-79", ], github_reviewed: true, github_reviewed_at: "2022-06-17T21:55:58Z", nvd_published_at: "2009-03-09T21:30:00Z", severity: "MODERATE", }, details: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", id: "GHSA-j788-fx57-99wp", modified: "2022-06-17T21:55:58Z", published: "2022-05-02T03:18:14Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", }, { type: "WEB", url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { type: "WEB", url: "https://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { type: "WEB", url: "https://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { type: "WEB", url: "https://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { type: "WEB", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { type: "WEB", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { type: "WEB", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { type: "WEB", url: "https://tomcat.apache.org/security-4.html", }, { type: "WEB", url: "https://tomcat.apache.org/security-5.html", }, { type: "WEB", url: "https://tomcat.apache.org/security-6.html", }, { type: "WEB", url: "https://www.debian.org/security/2011/dsa-2207", }, { type: "WEB", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { type: "WEB", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { type: "WEB", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2009:1164", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2009:1562", }, { type: "WEB", url: "https://access.redhat.com/security/cve/CVE-2009-0781", }, { type: "WEB", url: "https://bugzilla.redhat.com/show_bug.cgi?id=489028", }, { type: "WEB", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { type: "WEB", url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E", }, { type: "WEB", url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, ], schema_version: "1.4.0", severity: [], summary: "Cross-site scripting in Apache Tomcat", }
fkie_cve-2009-0781
Vulnerability from fkie_nvd
Published
2009-03-09 21:30
Modified
2024-11-21 01:00
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*", matchCriteriaId: "0E300013-0CE7-4313-A553-74A6A247B3E9", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*", matchCriteriaId: "E08D7414-8D0C-45D6-8E87-679DF0201D55", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*", matchCriteriaId: "AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*", matchCriteriaId: "60CFD9CA-1878-4C74-A9BD-5D581736E6B6", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*", matchCriteriaId: "B7E52BE7-5281-4430-8846-E41CF34FC214", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*", matchCriteriaId: "02860646-1D72-4D9A-AE2A-5868C8EDB3AA", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*", matchCriteriaId: "5BE4B9B5-9C2E-47E1-9483-88A17264594F", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*", matchCriteriaId: "5BE92A9B-4B8C-468E-9162-A56ED5313E17", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*", matchCriteriaId: "AE21D455-5B38-4B07-8E25-4EE782501EB3", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*", matchCriteriaId: "B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*", matchCriteriaId: "47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*", matchCriteriaId: "CBDA8066-294D-431E-B026-C03707DFBCD5", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*", matchCriteriaId: "C92F3744-C8F9-4E29-BF1A-25E03A32F2C0", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*", matchCriteriaId: "084B3227-FE22-43E3-AE06-7BB257018690", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*", matchCriteriaId: "F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*", matchCriteriaId: "D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*", matchCriteriaId: "6D536FF4-7582-4351-ABE3-876E20F8E7FE", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*", matchCriteriaId: "1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*", matchCriteriaId: "FB43F47F-5BF9-43A0-BF0E-451B4A8F7137", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*", matchCriteriaId: "DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*", matchCriteriaId: "11DDD82E-5D83-4581-B2F3-F12655BBF817", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*", matchCriteriaId: "8A0F0C91-171E-421D-BE86-11567DEFC7BD", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*", matchCriteriaId: "F22D2621-D305-43CE-B00D-9A7563B061F7", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*", matchCriteriaId: "9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*", matchCriteriaId: "7F4245BA-B05C-49DE-B2E0-1E588209ED3B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*", matchCriteriaId: "8633532B-9785-4259-8840-B08529E20DCC", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*", matchCriteriaId: "B1D9BD7E-FCC2-404B-A057-1A10997DAFF9", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*", matchCriteriaId: "F935ED72-58F4-49C1-BD9F-5473E0B9D8CE", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*", matchCriteriaId: "FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*", matchCriteriaId: "2EA52901-2D16-4F7E-BF5E-780B42A55D6A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*", matchCriteriaId: "6A79DA2C-35F3-47DE-909B-8D8D1AE111C8", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*", matchCriteriaId: "8BF6952D-6308-4029-8B63-0BD9C648C60F", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*", matchCriteriaId: "94941F86-0BBF-4F30-8F13-FB895A11ED69", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*", matchCriteriaId: "17522878-4266-432A-859D-C02096C8AC0E", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*", matchCriteriaId: "951FFCD7-EAC2-41E6-A53B-F90C540327E8", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*", matchCriteriaId: "BF1F2738-C7D6-4206-9227-43F464887FF5", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*", matchCriteriaId: "98EEB6F2-A721-45CF-A856-0E01B043C317", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*", matchCriteriaId: "02FDE602-A56A-477E-B704-41AF92EEBB9D", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*", matchCriteriaId: "5A28B11A-3BC7-41BC-8970-EE075B029F5C", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*", matchCriteriaId: "4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*", matchCriteriaId: "EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*", matchCriteriaId: "6E98B82A-22E5-4E6C-90AE-56F5780EA147", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*", matchCriteriaId: "34672E90-C220-436B-9143-480941227933", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*", matchCriteriaId: "92883AFA-A02F-41A5-9977-ABEAC8AD2970", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*", matchCriteriaId: "989A78F8-EE92-465F-8A8D-ECF0B58AFE7A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*", matchCriteriaId: "1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*", matchCriteriaId: "ACFB09F3-32D1-479C-8C39-D7329D9A6623", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*", matchCriteriaId: "D56581E2-9ECD-426A-96D8-A9D958900AD2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*", matchCriteriaId: "717F6995-5AF0-484C-90C0-A82F25FD2E32", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*", matchCriteriaId: "5B0C01D5-773F-469C-9E69-170C2844AAA4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*", matchCriteriaId: "EB03FDFB-4DBF-4B70-BFA3-570D1DE67695", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*", matchCriteriaId: "9F5CF79C-759B-4FF9-90EE-847264059E93", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*", matchCriteriaId: "357651FD-392E-4775-BF20-37A23B3ABAE4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*", matchCriteriaId: "585B9476-6B86-4809-9B9E-26112114CB59", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*", matchCriteriaId: "6145036D-4FCE-4EBE-A137-BDFA69BA54F8", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*", matchCriteriaId: "E437055A-0A81-413F-AB08-0E9D0DC9EA30", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*", matchCriteriaId: "9276A093-9C98-4617-9941-2276995F5848", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*", matchCriteriaId: "97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*", matchCriteriaId: "C98575E2-E39A-4A8F-B5B5-BD280B8367BC", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*", matchCriteriaId: "5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*", matchCriteriaId: "DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*", matchCriteriaId: "5878E08E-2741-4798-94E9-BA8E07386B12", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*", matchCriteriaId: "69F6BAB7-C099-4345-A632-7287AEA555B2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*", matchCriteriaId: "F3AAF031-D16B-4D51-9581-2D1376A5157B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*", matchCriteriaId: "51120689-F5C0-4DF1-91AA-314C40A46C58", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*", matchCriteriaId: "F67477AB-85F6-421C-9C0B-C8EFB1B200CF", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*", matchCriteriaId: "16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*", matchCriteriaId: "D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*", matchCriteriaId: "49E3C039-A949-4F1B-892A-57147EECB249", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*", matchCriteriaId: "F28C7801-41B9-4552-BA1E-577967BCBBEE", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*", matchCriteriaId: "25B21085-7259-4685-9D1F-FF98E6489E10", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*", matchCriteriaId: "635EE321-2A1F-4FF8-95BE-0C26591969D9", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*", matchCriteriaId: "9A81B035-8598-4D2C-B45F-C6C9D4B10C2F", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*", matchCriteriaId: "E1096947-82A6-4EA8-A4F2-00D91E3F7DAF", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*", matchCriteriaId: "0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*", matchCriteriaId: "B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*", matchCriteriaId: "9C95ADA4-66F5-45C4-A677-ACE22367A75A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*", matchCriteriaId: "11951A10-39A2-4FF5-8C43-DF94730FB794", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*", matchCriteriaId: "351E5BCF-A56B-4D91-BA3C-21A4B77D529A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*", matchCriteriaId: "2DC2BBB4-171E-4EFF-A575-A5B7FF031755", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*", matchCriteriaId: "6B6B0504-27C1-4824-A928-A878CBBAB32D", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*", matchCriteriaId: "CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*", matchCriteriaId: "D903956B-14F5-4177-AF12-0A5F1846D3C4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*", matchCriteriaId: "81F847DC-A2F5-456C-9038-16A0E85F4C3B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*", matchCriteriaId: "AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", }, { lang: "es", value: "Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en jsp/cal/cal2.jsp en la aplicación 'calendar' de los ejemplos de aplicaciones Web de Apache Tomcat 4.1.0 a 4.1.39, 5.5.0 a 5.5.27 y 6.0.0 a 6.0.18 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'time', en relación a un \"HTML no válido.\"", }, ], id: "CVE-2009-0781", lastModified: "2024-11-21T01:00:54.503", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2009-03-09T21:30:00.217", references: [ { source: "secalert@redhat.com", url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { source: "secalert@redhat.com", url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/35685", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/35788", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/37460", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/42368", }, { source: "secalert@redhat.com", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { source: "secalert@redhat.com", url: "http://support.apple.com/kb/HT4077", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-4.html", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-5.html", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-6.html", }, { source: "secalert@redhat.com", url: "http://www.debian.org/security/2011/dsa-2207", }, { source: "secalert@redhat.com", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { source: "secalert@redhat.com", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { source: "secalert@redhat.com", url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { source: "secalert@redhat.com", url: "http://www.vupen.com/english/advisories/2009/1856", }, { source: "secalert@redhat.com", url: "http://www.vupen.com/english/advisories/2009/3316", }, { source: "secalert@redhat.com", url: "http://www.vupen.com/english/advisories/2010/3056", }, { source: "secalert@redhat.com", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { source: "secalert@redhat.com", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { source: "secalert@redhat.com", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { source: "secalert@redhat.com", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/35685", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/35788", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/37460", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/42368", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://support.apple.com/kb/HT4077", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-4.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-5.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-6.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2011/dsa-2207", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.vupen.com/english/advisories/2009/1856", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.vupen.com/english/advisories/2009/3316", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.vupen.com/english/advisories/2010/3056", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, ], sourceIdentifier: "secalert@redhat.com", vendorComments: [ { comment: "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/", lastModified: "2009-03-17T00:00:00", organization: "Red Hat", }, ], vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2009-0781
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
Aliases
Aliases
{ GSD: { alias: "CVE-2009-0781", description: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", id: "GSD-2009-0781", references: [ "https://www.suse.com/security/cve/CVE-2009-0781.html", "https://www.debian.org/security/2011/dsa-2207", "https://access.redhat.com/errata/RHSA-2009:1562", "https://access.redhat.com/errata/RHSA-2009:1164", "https://linux.oracle.com/cve/CVE-2009-0781.html", "https://packetstormsecurity.com/files/cve/CVE-2009-0781", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2009-0781", ], details: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", id: "GSD-2009-0781", modified: "2023-12-13T01:19:44.327892Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2009-0781", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_affected: "=", version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", refsource: "MISC", url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", refsource: "MISC", url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { name: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", refsource: "MISC", url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", refsource: "MISC", url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", refsource: "MISC", url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", refsource: "MISC", url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "http://secunia.com/advisories/35685", refsource: "MISC", url: "http://secunia.com/advisories/35685", }, { name: "http://secunia.com/advisories/35788", refsource: "MISC", url: "http://secunia.com/advisories/35788", }, { name: "http://secunia.com/advisories/37460", refsource: "MISC", url: "http://secunia.com/advisories/37460", }, { name: "http://secunia.com/advisories/42368", refsource: "MISC", url: "http://secunia.com/advisories/42368", }, { name: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", refsource: "MISC", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { name: "http://support.apple.com/kb/HT4077", refsource: "MISC", url: "http://support.apple.com/kb/HT4077", }, { name: "http://tomcat.apache.org/security-4.html", refsource: "MISC", url: "http://tomcat.apache.org/security-4.html", }, { name: "http://tomcat.apache.org/security-5.html", refsource: "MISC", url: "http://tomcat.apache.org/security-5.html", }, { name: "http://tomcat.apache.org/security-6.html", refsource: "MISC", url: "http://tomcat.apache.org/security-6.html", }, { name: "http://www.debian.org/security/2011/dsa-2207", refsource: "MISC", url: "http://www.debian.org/security/2011/dsa-2207", }, { name: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", refsource: "MISC", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { name: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", refsource: "MISC", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { name: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", refsource: "MISC", url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { name: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", refsource: "MISC", url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { name: "http://www.vupen.com/english/advisories/2009/1856", refsource: "MISC", url: "http://www.vupen.com/english/advisories/2009/1856", }, { name: "http://www.vupen.com/english/advisories/2009/3316", refsource: "MISC", url: "http://www.vupen.com/english/advisories/2009/3316", }, { name: "http://www.vupen.com/english/advisories/2010/3056", refsource: "MISC", url: "http://www.vupen.com/english/advisories/2010/3056", }, { name: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", refsource: "MISC", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { name: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", refsource: "MISC", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { name: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", refsource: "MISC", url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { name: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", refsource: "MISC", url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { name: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", refsource: "MISC", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { name: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", refsource: "MISC", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { name: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", refsource: "MISC", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { name: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", refsource: "MISC", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, ], }, }, "gitlab.com": { advisories: [ { affected_range: "[4.1.0,4.1.39],[5.5.0,5.5.27],[6.0.0,6.0.18]", affected_versions: "All versions starting from 4.1.0 up to 4.1.39, all versions starting from 5.5.0 up to 5.5.27, all versions starting from 6.0.0 up to 6.0.18", cvss_v2: "AV:N/AC:M/Au:N/C:N/I:P/A:N", cwe_ids: [ "CWE-1035", "CWE-79", "CWE-79", "CWE-937", ], date: "2022-06-17", description: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", fixed_versions: [ "6.0.20", ], identifier: "CVE-2009-0781", identifiers: [ "GHSA-j788-fx57-99wp", "CVE-2009-0781", ], not_impacted: "All versions before 4.1.0, all versions after 4.1.39 before 5.5.0, all versions after 5.5.27 before 6.0.0, all versions after 6.0.18", package_slug: "maven/org.apache.tomcat/tomcat", pubdate: "2022-05-02", solution: "Upgrade to version 6.0.20 or above.", title: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", urls: [ "https://nvd.nist.gov/vuln/detail/CVE-2009-0781", "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E", "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", "http://marc.info/?l=bugtraq&m=127420533226623&w=2", "http://marc.info/?l=bugtraq&m=129070310906557&w=2", "http://marc.info/?l=bugtraq&m=133469267822771&w=2", "http://marc.info/?l=bugtraq&m=136485229118404&w=2", "http://support.apple.com/kb/HT4077", "http://tomcat.apache.org/security-4.html", "http://tomcat.apache.org/security-5.html", "http://tomcat.apache.org/security-6.html", "http://www.debian.org/security/2011/dsa-2207", "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", "https://github.com/advisories/GHSA-j788-fx57-99wp", ], uuid: "53f99029-9b04-420a-bb31-6f60acedf669", }, ], }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2009-0781", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\"", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-79", }, ], }, ], }, references: { reference_data: [ { name: "http://tomcat.apache.org/security-6.html", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-6.html", }, { name: "http://tomcat.apache.org/security-4.html", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-4.html", }, { name: "http://tomcat.apache.org/security-5.html", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "http://tomcat.apache.org/security-5.html", }, { name: "MDVSA-2009:138", refsource: "MANDRIVA", tags: [], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:138", }, { name: "MDVSA-2009:136", refsource: "MANDRIVA", tags: [], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:136", }, { name: "SUSE-SR:2009:012", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html", }, { name: "263529", refsource: "SUNALERT", tags: [], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1", }, { name: "35685", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/35685", }, { name: "35788", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/35788", }, { name: "ADV-2009-1856", refsource: "VUPEN", tags: [], url: "http://www.vupen.com/english/advisories/2009/1856", }, { name: "FEDORA-2009-11356", refsource: "FEDORA", tags: [], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html", }, { name: "37460", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/37460", }, { name: "FEDORA-2009-11374", refsource: "FEDORA", tags: [], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html", }, { name: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", refsource: "CONFIRM", tags: [], url: "http://www.vmware.com/security/advisories/VMSA-2009-0016.html", }, { name: "ADV-2009-3316", refsource: "VUPEN", tags: [], url: "http://www.vupen.com/english/advisories/2009/3316", }, { name: "FEDORA-2009-11352", refsource: "FEDORA", tags: [], url: "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html", }, { name: "http://support.apple.com/kb/HT4077", refsource: "CONFIRM", tags: [], url: "http://support.apple.com/kb/HT4077", }, { name: "APPLE-SA-2010-03-29-1", refsource: "APPLE", tags: [], url: "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", }, { name: "HPSBUX02579", refsource: "HP", tags: [], url: "http://marc.info/?l=bugtraq&m=129070310906557&w=2", }, { name: "ADV-2010-3056", refsource: "VUPEN", tags: [], url: "http://www.vupen.com/english/advisories/2010/3056", }, { name: "42368", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/42368", }, { name: "DSA-2207", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2011/dsa-2207", }, { name: "HPSBUX02860", refsource: "HP", tags: [], url: "http://marc.info/?l=bugtraq&m=136485229118404&w=2", }, { name: "HPSBOV02762", refsource: "HP", tags: [], url: "http://marc.info/?l=bugtraq&m=133469267822771&w=2", }, { name: "HPSBMA02535", refsource: "HP", tags: [], url: "http://marc.info/?l=bugtraq&m=127420533226623&w=2", }, { name: "tomcat-cal2-xss(49213)", refsource: "XF", tags: [], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49213", }, { name: "oval:org.mitre.oval:def:6564", refsource: "OVAL", tags: [], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564", }, { name: "oval:org.mitre.oval:def:19345", refsource: "OVAL", tags: [], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345", }, { name: "oval:org.mitre.oval:def:11041", refsource: "OVAL", tags: [], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041", }, { name: "20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components", refsource: "BUGTRAQ", tags: [], url: "http://www.securityfocus.com/archive/1/507985/100/0/threaded", }, { name: "20090306 [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application", refsource: "BUGTRAQ", tags: [], url: "http://www.securityfocus.com/archive/1/501538/100/0/threaded", }, { name: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E", }, { name: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", refsource: "MISC", tags: [], url: "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, }, lastModifiedDate: "2023-02-13T02:19Z", publishedDate: "2009-03-09T21:30Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.