{
   GSD: {
      alias: "CVE-2004-0688",
      description: "Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",
      id: "GSD-2004-0688",
      references: [
         "https://www.suse.com/security/cve/CVE-2004-0688.html",
         "https://www.debian.org/security/2004/dsa-561",
         "https://www.debian.org/security/2004/dsa-560",
         "https://access.redhat.com/errata/RHSA-2008:0524",
         "https://access.redhat.com/errata/RHSA-2005:004",
         "https://access.redhat.com/errata/RHSA-2004:537",
         "https://access.redhat.com/errata/RHSA-2004:479",
         "https://access.redhat.com/errata/RHSA-2004:478",
      ],
   },
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2004-0688",
         ],
         details: "Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",
         id: "GSD-2004-0688",
         modified: "2023-12-13T01:22:54.694510Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "cve@mitre.org",
            ID: "CVE-2004-0688",
            STATE: "PUBLIC",
         },
         affects: {
            vendor: {
               vendor_data: [
                  {
                     product: {
                        product_data: [
                           {
                              product_name: "n/a",
                              version: {
                                 version_data: [
                                    {
                                       version_value: "n/a",
                                    },
                                 ],
                              },
                           },
                        ],
                     },
                     vendor_name: "n/a",
                  },
               ],
            },
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",
               },
            ],
         },
         problemtype: {
            problemtype_data: [
               {
                  description: [
                     {
                        lang: "eng",
                        value: "n/a",
                     },
                  ],
               },
            ],
         },
         references: {
            reference_data: [
               {
                  name: "VU#537878",
                  refsource: "CERT-VN",
                  url: "http://www.kb.cert.org/vuls/id/537878",
               },
               {
                  name: "RHSA-2005:004",
                  refsource: "REDHAT",
                  url: "http://www.redhat.com/support/errata/RHSA-2005-004.html",
               },
               {
                  name: "USN-27-1",
                  refsource: "UBUNTU",
                  url: "https://usn.ubuntu.com/27-1/",
               },
               {
                  name: "ADV-2006-1914",
                  refsource: "VUPEN",
                  url: "http://www.vupen.com/english/advisories/2006/1914",
               },
               {
                  name: "GLSA-200409-34",
                  refsource: "GENTOO",
                  url: "http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml",
               },
               {
                  name: "TA05-136A",
                  refsource: "CERT",
                  url: "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
               },
               {
                  name: "MDKSA-2004:098",
                  refsource: "MANDRAKE",
                  url: "http://www.mandriva.com/security/advisories?name=MDKSA-2004:098",
               },
               {
                  name: "HPSBUX02119",
                  refsource: "HP",
                  url: "http://www.securityfocus.com/archive/1/434715/100/0/threaded",
               },
               {
                  name: "RHSA-2004:537",
                  refsource: "REDHAT",
                  url: "http://www.redhat.com/support/errata/RHSA-2004-537.html",
               },
               {
                  name: "20040915 CESA-2004-004: libXpm",
                  refsource: "BUGTRAQ",
                  url: "http://marc.info/?l=bugtraq&m=109530851323415&w=2",
               },
               {
                  name: "DSA-560",
                  refsource: "DEBIAN",
                  url: "http://www.debian.org/security/2004/dsa-560",
               },
               {
                  name: "oval:org.mitre.oval:def:11796",
                  refsource: "OVAL",
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796",
               },
               {
                  name: "http://scary.beasts.org/security/CESA-2004-003.txt",
                  refsource: "MISC",
                  url: "http://scary.beasts.org/security/CESA-2004-003.txt",
               },
               {
                  name: "APPLE-SA-2005-05-03",
                  refsource: "APPLE",
                  url: "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
               },
               {
                  name: "CLA-2005:924",
                  refsource: "CONECTIVA",
                  url: "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924",
               },
               {
                  name: "SUSE-SA:2004:034",
                  refsource: "SUSE",
                  url: "http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html",
               },
               {
                  name: "libxpm-xpmfile-integer-overflow(17416)",
                  refsource: "XF",
                  url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/17416",
               },
               {
                  name: "11196",
                  refsource: "BID",
                  url: "http://www.securityfocus.com/bid/11196",
               },
               {
                  name: "GLSA-200502-07",
                  refsource: "GENTOO",
                  url: "http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml",
               },
               {
                  name: "http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch",
                  refsource: "CONFIRM",
                  url: "http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch",
               },
               {
                  name: "FLSA-2006:152803",
                  refsource: "FEDORA",
                  url: "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html",
               },
               {
                  name: "20235",
                  refsource: "SECUNIA",
                  url: "http://secunia.com/advisories/20235",
               },
               {
                  name: "SSRT4848",
                  refsource: "HP",
                  url: "http://www.securityfocus.com/archive/1/434715/100/0/threaded",
               },
               {
                  name: "57653",
                  refsource: "SUNALERT",
                  url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1",
               },
            ],
         },
      },
      "nvd.nist.gov": {
         configurations: {
            CVE_data_version: "4.0",
            nodes: [
               {
                  children: [],
                  cpe_match: [
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                  ],
                  operator: "OR",
               },
               {
                  children: [],
                  cpe_match: [
                     {
                        cpe23Uri: "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*",
                        cpe_name: [],
                        vulnerable: true,
                     },
                  ],
                  operator: "OR",
               },
            ],
         },
         cve: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2004-0688",
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "en",
                     value: "Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "en",
                           value: "NVD-CWE-Other",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "11196",
                     refsource: "BID",
                     tags: [
                        "Patch",
                        "Vendor Advisory",
                     ],
                     url: "http://www.securityfocus.com/bid/11196",
                  },
                  {
                     name: "http://scary.beasts.org/security/CESA-2004-003.txt",
                     refsource: "MISC",
                     tags: [],
                     url: "http://scary.beasts.org/security/CESA-2004-003.txt",
                  },
                  {
                     name: "http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch",
                     refsource: "CONFIRM",
                     tags: [],
                     url: "http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch",
                  },
                  {
                     name: "DSA-560",
                     refsource: "DEBIAN",
                     tags: [],
                     url: "http://www.debian.org/security/2004/dsa-560",
                  },
                  {
                     name: "GLSA-200409-34",
                     refsource: "GENTOO",
                     tags: [],
                     url: "http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml",
                  },
                  {
                     name: "GLSA-200502-07",
                     refsource: "GENTOO",
                     tags: [],
                     url: "http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml",
                  },
                  {
                     name: "RHSA-2004:537",
                     refsource: "REDHAT",
                     tags: [],
                     url: "http://www.redhat.com/support/errata/RHSA-2004-537.html",
                  },
                  {
                     name: "RHSA-2005:004",
                     refsource: "REDHAT",
                     tags: [],
                     url: "http://www.redhat.com/support/errata/RHSA-2005-004.html",
                  },
                  {
                     name: "SUSE-SA:2004:034",
                     refsource: "SUSE",
                     tags: [],
                     url: "http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html",
                  },
                  {
                     name: "VU#537878",
                     refsource: "CERT-VN",
                     tags: [
                        "US Government Resource",
                     ],
                     url: "http://www.kb.cert.org/vuls/id/537878",
                  },
                  {
                     name: "APPLE-SA-2005-05-03",
                     refsource: "APPLE",
                     tags: [],
                     url: "http://lists.apple.com/archives/security-announce/2005/May/msg00001.html",
                  },
                  {
                     name: "TA05-136A",
                     refsource: "CERT",
                     tags: [
                        "US Government Resource",
                     ],
                     url: "http://www.us-cert.gov/cas/techalerts/TA05-136A.html",
                  },
                  {
                     name: "FLSA-2006:152803",
                     refsource: "FEDORA",
                     tags: [],
                     url: "http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html",
                  },
                  {
                     name: "CLA-2005:924",
                     refsource: "CONECTIVA",
                     tags: [],
                     url: "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924",
                  },
                  {
                     name: "57653",
                     refsource: "SUNALERT",
                     tags: [],
                     url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1",
                  },
                  {
                     name: "20235",
                     refsource: "SECUNIA",
                     tags: [],
                     url: "http://secunia.com/advisories/20235",
                  },
                  {
                     name: "MDKSA-2004:098",
                     refsource: "MANDRAKE",
                     tags: [],
                     url: "http://www.mandriva.com/security/advisories?name=MDKSA-2004:098",
                  },
                  {
                     name: "ADV-2006-1914",
                     refsource: "VUPEN",
                     tags: [],
                     url: "http://www.vupen.com/english/advisories/2006/1914",
                  },
                  {
                     name: "20040915 CESA-2004-004: libXpm",
                     refsource: "BUGTRAQ",
                     tags: [],
                     url: "http://marc.info/?l=bugtraq&m=109530851323415&w=2",
                  },
                  {
                     name: "libxpm-xpmfile-integer-overflow(17416)",
                     refsource: "XF",
                     tags: [],
                     url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/17416",
                  },
                  {
                     name: "oval:org.mitre.oval:def:11796",
                     refsource: "OVAL",
                     tags: [],
                     url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796",
                  },
                  {
                     name: "USN-27-1",
                     refsource: "UBUNTU",
                     tags: [],
                     url: "https://usn.ubuntu.com/27-1/",
                  },
                  {
                     name: "HPSBUX02119",
                     refsource: "HP",
                     tags: [],
                     url: "http://www.securityfocus.com/archive/1/434715/100/0/threaded",
                  },
               ],
            },
         },
         impact: {
            baseMetricV2: {
               cvssV2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 7.5,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "PARTIAL",
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                  version: "2.0",
               },
               exploitabilityScore: 10,
               impactScore: 6.4,
               obtainAllPrivilege: false,
               obtainOtherPrivilege: true,
               obtainUserPrivilege: false,
               severity: "HIGH",
               userInteractionRequired: false,
            },
         },
         lastModifiedDate: "2018-10-19T15:30Z",
         publishedDate: "2004-10-20T04:00Z",
      },
   },
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Low",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Red Hat Network Satellite Server version 4.2.3 is now available. This\nupdate includes fixes for a number of security issues in Red Hat Network\nSatellite Server components.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.",
            title: "Topic",
         },
         {
            category: "general",
            text: "This release corrects several security vulnerabilities in various\ncomponents shipped as part of the Red Hat Network Satellite Server 4.2. In\na typical operating environment, these components are not exposed to users\nof Satellite Server in a vulnerable manner. These security updates will\nreduce risk in unique Satellite Server environments.\n\nMultiple flaws were fixed in the Apache HTTPD server. These flaws could\nresult in a cross-site scripting, denial-of-service, or information\ndisclosure attacks. (CVE-2004-0885, CVE-2006-5752, CVE-2006-7197,\nCVE-2007-1860, CVE-2007-3304, CVE-2007-4465, CVE-2007-5000, CVE-2007-6388)\n\nA denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)\n\nA denial-of-service flaw was fixed in the jabberd server. (CVE-2006-1329)\n\nMultiple cross-site scripting flaws were fixed in the image map feature in\nthe JFreeChart package. (CVE-2007-6306)\n\nMultiple flaws were fixed in the IBM Java 1.4.2 Runtime. (CVE-2007-0243,\nCVE-2007-2435, CVE-2007-2788, CVE-2007-2789)\n\nMultiple flaws were fixed in the OpenMotif package. (CVE-2004-0687,\nCVE-2004-0688, CVE-2004-0914, CVE-2005-3964, CVE-2005-0605)\n\nA flaw which could result in weak encryption was fixed in the\nperl-Crypt-CBC package. (CVE-2006-0898)\n\nMultiple flaws were fixed in the Tomcat package. (CVE-2008-0128,\nCVE-2007-5461, CVE-2007-3385, CVE-2007-3382, CVE-2007-1358, CVE-2007-1355,\nCVE-2007-2450, CVE-2007-2449, CVE-2007-0450, CVE-2006-7196, CVE-2006-7195,\nCVE-2006-3835, CVE-2006-0254, CVE-2005-2090, CVE-2005-4838, CVE-2005-3510)\n\nUsers of Red Hat Network Satellite Server 4.2 are advised to upgrade to\n4.2.3, which resolves these issues.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2008:0524",
            url: "https://access.redhat.com/errata/RHSA-2008:0524",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#low",
            url: "https://access.redhat.com/security/updates/classification/#low",
         },
         {
            category: "external",
            summary: "449337",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=449337",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0524.json",
         },
      ],
      title: "Red Hat Security Advisory: Red Hat Network Satellite Server security update",
      tracking: {
         current_release_date: "2025-01-26T19:36:01+00:00",
         generator: {
            date: "2025-01-26T19:36:01+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.6",
            },
         },
         id: "RHSA-2008:0524",
         initial_release_date: "2008-06-30T15:33:00+00:00",
         revision_history: [
            {
               date: "2008-06-30T15:33:00+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2008-06-30T11:33:26+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-01-26T19:36:01+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
                        product: {
                           name: "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
                           product_id: "3AS-RHNSAT4.2",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:network_satellite:4.2::el3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
                        product: {
                           name: "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
                           product_id: "4AS-RHNSAT4.2",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:network_satellite:4.2::el4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Satellite",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "jabberd-0:2.0s10-3.37.rhn.i386",
                        product: {
                           name: "jabberd-0:2.0s10-3.37.rhn.i386",
                           product_id: "jabberd-0:2.0s10-3.37.rhn.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jabberd@2.0s10-3.37.rhn?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                        product: {
                           name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                           product_id: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/java-1.4.2-ibm-devel@1.4.2.10-1jpp.2.el3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                        product: {
                           name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                           product_id: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.10-1jpp.2.el3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                        product: {
                           name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                           product_id: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modjk-ap13@1.2.23-2rhn.rhel3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openmotif21-0:2.1.30-9.RHEL3.8.i386",
                        product: {
                           name: "openmotif21-0:2.1.30-9.RHEL3.8.i386",
                           product_id: "openmotif21-0:2.1.30-9.RHEL3.8.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openmotif21@2.1.30-9.RHEL3.8?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                        product: {
                           name: "openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                           product_id: "openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openmotif21-debuginfo@2.1.30-9.RHEL3.8?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                        product: {
                           name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                           product_id: "rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modssl@2.8.12-8.rhn.10.rhel3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                        product: {
                           name: "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                           product_id: "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modperl-0:1.29-16.rhel3.i386",
                        product: {
                           name: "rhn-modperl-0:1.29-16.rhel3.i386",
                           product_id: "rhn-modperl-0:1.29-16.rhel3.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel3?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                        product: {
                           name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                           product_id: "rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modssl@2.8.12-8.rhn.10.rhel4?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jabberd-0:2.0s10-3.38.rhn.i386",
                        product: {
                           name: "jabberd-0:2.0s10-3.38.rhn.i386",
                           product_id: "jabberd-0:2.0s10-3.38.rhn.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jabberd@2.0s10-3.38.rhn?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openmotif21-0:2.1.30-11.RHEL4.6.i386",
                        product: {
                           name: "openmotif21-0:2.1.30-11.RHEL4.6.i386",
                           product_id: "openmotif21-0:2.1.30-11.RHEL4.6.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openmotif21@2.1.30-11.RHEL4.6?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                        product: {
                           name: "openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                           product_id: "openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openmotif21-debuginfo@2.1.30-11.RHEL4.6?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                        product: {
                           name: "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                           product_id: "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-apache@1.3.27-36.rhn.rhel4?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                        product: {
                           name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                           product_id: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.10-1jpp.2.el4?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                        product: {
                           name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                           product_id: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/java-1.4.2-ibm-devel@1.4.2.10-1jpp.2.el4?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                        product: {
                           name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                           product_id: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modjk-ap13@1.2.23-2rhn.rhel4?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "rhn-modperl-0:1.29-16.rhel4.i386",
                        product: {
                           name: "rhn-modperl-0:1.29-16.rhel4.i386",
                           product_id: "rhn-modperl-0:1.29-16.rhel4.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/rhn-modperl@1.29-16.rhel4?arch=i386",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i386",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "jfreechart-0:0.9.20-3.rhn.noarch",
                        product: {
                           name: "jfreechart-0:0.9.20-3.rhn.noarch",
                           product_id: "jfreechart-0:0.9.20-3.rhn.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jfreechart@0.9.20-3.rhn?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "tomcat5-0:5.0.30-0jpp_10rh.noarch",
                        product: {
                           name: "tomcat5-0:5.0.30-0jpp_10rh.noarch",
                           product_id: "tomcat5-0:5.0.30-0jpp_10rh.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/tomcat5@5.0.30-0jpp_10rh?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "perl-Crypt-CBC-0:2.24-1.el3.noarch",
                        product: {
                           name: "perl-Crypt-CBC-0:2.24-1.el3.noarch",
                           product_id: "perl-Crypt-CBC-0:2.24-1.el3.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/perl-Crypt-CBC@2.24-1.el3?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "perl-Crypt-CBC-0:2.24-1.el4.noarch",
                        product: {
                           name: "perl-Crypt-CBC-0:2.24-1.el4.noarch",
                           product_id: "perl-Crypt-CBC-0:2.24-1.el4.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/perl-Crypt-CBC@2.24-1.el4?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "jabberd-0:2.0s10-3.37.rhn.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
            },
            product_reference: "jabberd-0:2.0s10-3.37.rhn.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
            },
            product_reference: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
            },
            product_reference: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jfreechart-0:0.9.20-3.rhn.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
            },
            product_reference: "jfreechart-0:0.9.20-3.rhn.noarch",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openmotif21-0:2.1.30-9.RHEL3.8.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
            },
            product_reference: "openmotif21-0:2.1.30-9.RHEL3.8.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
            },
            product_reference: "openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "perl-Crypt-CBC-0:2.24-1.el3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
            },
            product_reference: "perl-Crypt-CBC-0:2.24-1.el3.noarch",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-apache-0:1.3.27-36.rhn.rhel3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            },
            product_reference: "rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
            },
            product_reference: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modperl-0:1.29-16.rhel3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
            },
            product_reference: "rhn-modperl-0:1.29-16.rhel3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
            },
            product_reference: "rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.0.30-0jpp_10rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
               product_id: "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            },
            product_reference: "tomcat5-0:5.0.30-0jpp_10rh.noarch",
            relates_to_product_reference: "3AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jabberd-0:2.0s10-3.38.rhn.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
            },
            product_reference: "jabberd-0:2.0s10-3.38.rhn.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
            },
            product_reference: "java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
            },
            product_reference: "java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jfreechart-0:0.9.20-3.rhn.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
            },
            product_reference: "jfreechart-0:0.9.20-3.rhn.noarch",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openmotif21-0:2.1.30-11.RHEL4.6.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
            },
            product_reference: "openmotif21-0:2.1.30-11.RHEL4.6.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
            },
            product_reference: "openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "perl-Crypt-CBC-0:2.24-1.el4.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
            },
            product_reference: "perl-Crypt-CBC-0:2.24-1.el4.noarch",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-apache-0:1.3.27-36.rhn.rhel4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            },
            product_reference: "rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
            },
            product_reference: "rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modperl-0:1.29-16.rhel4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
            },
            product_reference: "rhn-modperl-0:1.29-16.rhel4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386 as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
            },
            product_reference: "rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tomcat5-0:5.0.30-0jpp_10rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
               product_id: "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            },
            product_reference: "tomcat5-0:5.0.30-0jpp_10rh.noarch",
            relates_to_product_reference: "4AS-RHNSAT4.2",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2004-0687",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430513",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openmotif21 stack overflows in libxpm",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2004-0687",
            },
            {
               category: "external",
               summary: "RHBZ#430513",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430513",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2004-0687",
               url: "https://www.cve.org/CVERecord?id=CVE-2004-0687",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2004-0687",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2004-0687",
            },
         ],
         release_date: "2004-10-07T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openmotif21 stack overflows in libxpm",
      },
      {
         cve: "CVE-2004-0688",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430515",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openmotif21 stack overflows in libxpm",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2004-0688",
            },
            {
               category: "external",
               summary: "RHBZ#430515",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430515",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2004-0688",
               url: "https://www.cve.org/CVERecord?id=CVE-2004-0688",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2004-0688",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2004-0688",
            },
         ],
         release_date: "2004-09-15T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openmotif21 stack overflows in libxpm",
      },
      {
         cve: "CVE-2004-0885",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430637",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the \"SSLCipherSuite\" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_ssl SSLCipherSuite bypass",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2004-0885",
            },
            {
               category: "external",
               summary: "RHBZ#430637",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430637",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2004-0885",
               url: "https://www.cve.org/CVERecord?id=CVE-2004-0885",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2004-0885",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2004-0885",
            },
         ],
         release_date: "2004-10-05T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "mod_ssl SSLCipherSuite bypass",
      },
      {
         cve: "CVE-2004-0914",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430516",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openmotif21 stack overflows in libxpm",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2004-0914",
            },
            {
               category: "external",
               summary: "RHBZ#430516",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430516",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2004-0914",
               url: "https://www.cve.org/CVERecord?id=CVE-2004-0914",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2004-0914",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2004-0914",
            },
         ],
         release_date: "2004-09-15T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openmotif21 stack overflows in libxpm",
      },
      {
         cve: "CVE-2005-0605",
         discovery_date: "2005-02-28T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430520",
            },
         ],
         notes: [
            {
               category: "description",
               text: "scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "libxpm buffer overflow",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2005-0605",
            },
            {
               category: "external",
               summary: "RHBZ#430520",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430520",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2005-0605",
               url: "https://www.cve.org/CVERecord?id=CVE-2005-0605",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2005-0605",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2005-0605",
            },
         ],
         release_date: "2005-03-01T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "libxpm buffer overflow",
      },
      {
         cve: "CVE-2005-2090",
         discovery_date: "2005-06-06T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237079",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat multiple content-length header poisioning",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2005-2090",
            },
            {
               category: "external",
               summary: "RHBZ#237079",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237079",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2005-2090",
               url: "https://www.cve.org/CVERecord?id=CVE-2005-2090",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2005-2090",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2005-2090",
            },
         ],
         release_date: "2005-06-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat multiple content-length header poisioning",
      },
      {
         cve: "CVE-2005-3510",
         discovery_date: "2005-11-07T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237085",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat DoS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2005-3510",
            },
            {
               category: "external",
               summary: "RHBZ#237085",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237085",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2005-3510",
               url: "https://www.cve.org/CVERecord?id=CVE-2005-3510",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2005-3510",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2005-3510",
            },
         ],
         release_date: "2005-11-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat DoS",
      },
      {
         cve: "CVE-2005-3964",
         discovery_date: "2005-12-02T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430519",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openmotif libUil buffer overflows",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2005-3964",
            },
            {
               category: "external",
               summary: "RHBZ#430519",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430519",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2005-3964",
               url: "https://www.cve.org/CVERecord?id=CVE-2005-3964",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2005-3964",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2005-3964",
            },
         ],
         release_date: "2005-12-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openmotif libUil buffer overflows",
      },
      {
         cve: "CVE-2005-4838",
         discovery_date: "2005-01-03T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "238401",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp.  NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat manager example DoS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2005-4838",
            },
            {
               category: "external",
               summary: "RHBZ#238401",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=238401",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2005-4838",
               url: "https://www.cve.org/CVERecord?id=CVE-2005-4838",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2005-4838",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2005-4838",
            },
         ],
         release_date: "2005-01-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat manager example DoS",
      },
      {
         cve: "CVE-2006-0254",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2006-01-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430646",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat examples XSS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-0254",
            },
            {
               category: "external",
               summary: "RHBZ#430646",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430646",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-0254",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-0254",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-0254",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-0254",
            },
         ],
         release_date: "2006-01-15T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat examples XSS",
      },
      {
         cve: "CVE-2006-0898",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430522",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "perl-Crypt-CBC weaker encryption with some ciphers",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-0898",
            },
            {
               category: "external",
               summary: "RHBZ#430522",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430522",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-0898",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-0898",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-0898",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-0898",
            },
         ],
         release_date: "2006-02-23T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "perl-Crypt-CBC weaker encryption with some ciphers",
      },
      {
         cve: "CVE-2006-1329",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "429254",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service (\"c2s segfault\") by sending a \"response stanza before an auth stanza\".",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "jabberd SASL DoS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-1329",
            },
            {
               category: "external",
               summary: "RHBZ#429254",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=429254",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-1329",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-1329",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-1329",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-1329",
            },
         ],
         release_date: "2006-03-09T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "jabberd SASL DoS",
      },
      {
         cve: "CVE-2006-3835",
         discovery_date: "2006-07-21T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237084",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat directory listing issue",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue is not a security issue in Tomcat itself, but is caused when directory listings are enabled.\n\nDetails on how to disable directory listings are available at: http://tomcat.apache.org/faq/misc.html#listing",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-3835",
            },
            {
               category: "external",
               summary: "RHBZ#237084",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237084",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-3835",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-3835",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-3835",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-3835",
            },
         ],
         release_date: "2006-07-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat directory listing issue",
      },
      {
         cve: "CVE-2006-5752",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-06-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "245112",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform \"charset detection\" when the content-type is not specified.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd mod_status XSS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-5752",
            },
            {
               category: "external",
               summary: "RHBZ#245112",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=245112",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-5752",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-5752",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-5752",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-5752",
            },
         ],
         release_date: "2007-06-20T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "httpd mod_status XSS",
      },
      {
         cve: "CVE-2006-7195",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-04-19T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237081",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat XSS in example webapps",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-7195",
            },
            {
               category: "external",
               summary: "RHBZ#237081",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237081",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-7195",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-7195",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-7195",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-7195",
            },
         ],
         release_date: "2007-04-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat XSS in example webapps",
      },
      {
         cve: "CVE-2006-7196",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-04-26T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "238131",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors.  NOTE: this may be related to CVE-2006-0254.1.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat XSS in example webapps",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-7196",
            },
            {
               category: "external",
               summary: "RHBZ#238131",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=238131",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-7196",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-7196",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-7196",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-7196",
            },
         ],
         release_date: "2007-04-26T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat XSS in example webapps",
      },
      {
         cve: "CVE-2006-7197",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "430642",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_jk chunk too long",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-7197",
            },
            {
               category: "external",
               summary: "RHBZ#430642",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=430642",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-7197",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-7197",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-7197",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-7197",
            },
         ],
         release_date: "2006-03-05T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "mod_jk chunk too long",
      },
      {
         cve: "CVE-2007-0243",
         discovery_date: "2007-04-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "325941",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "java-jre: GIF buffer overflow",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-0243",
            },
            {
               category: "external",
               summary: "RHBZ#325941",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=325941",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-0243",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-0243",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-0243",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-0243",
            },
         ],
         release_date: "2007-01-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "java-jre: GIF buffer overflow",
      },
      {
         cve: "CVE-2007-0450",
         discovery_date: "2007-03-14T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237080",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) \"/\" (slash), (2) \"\\\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat directory traversal",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-0450",
            },
            {
               category: "external",
               summary: "RHBZ#237080",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237080",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-0450",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-0450",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-0450",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-0450",
            },
         ],
         release_date: "2007-03-14T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "tomcat directory traversal",
      },
      {
         cve: "CVE-2007-1349",
         discovery_date: "2007-05-17T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "240423",
            },
         ],
         notes: [
            {
               category: "description",
               text: "PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_perl PerlRun denial of service",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-1349",
            },
            {
               category: "external",
               summary: "RHBZ#240423",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=240423",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-1349",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-1349",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-1349",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-1349",
            },
         ],
         release_date: "2007-03-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "mod_perl PerlRun denial of service",
      },
      {
         cve: "CVE-2007-1355",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-05-19T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "253166",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the test parameter and unspecified vectors.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat XSS in samples",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-1355",
            },
            {
               category: "external",
               summary: "RHBZ#253166",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=253166",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-1355",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-1355",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-1355",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-1355",
            },
         ],
         release_date: "2007-05-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat XSS in samples",
      },
      {
         cve: "CVE-2007-1358",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-04-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "244803",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted \"Accept-Language headers that do not conform to RFC 2616\".",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat accept-language xss flaw",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-1358",
            },
            {
               category: "external",
               summary: "RHBZ#244803",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=244803",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-1358",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-1358",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-1358",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-1358",
            },
         ],
         release_date: "2007-06-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat accept-language xss flaw",
      },
      {
         cve: "CVE-2007-1860",
         discovery_date: "2007-04-20T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "237656",
            },
         ],
         notes: [
            {
               category: "description",
               text: "mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_jk sends decoded URL to tomcat",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-1860",
            },
            {
               category: "external",
               summary: "RHBZ#237656",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=237656",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-1860",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-1860",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-1860",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-1860",
            },
         ],
         release_date: "2007-05-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "mod_jk sends decoded URL to tomcat",
      },
      {
         cve: "CVE-2007-2435",
         discovery_date: "2007-05-01T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "239660",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to \"Incorrect Use of System Classes\" and probably related to support for JNLP files.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "javaws vulnerabilities",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-2435",
            },
            {
               category: "external",
               summary: "RHBZ#239660",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=239660",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-2435",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-2435",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-2435",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-2435",
            },
         ],
         release_date: "2007-04-30T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Critical",
            },
         ],
         title: "javaws vulnerabilities",
      },
      {
         cve: "CVE-2007-2449",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-05-24T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "244804",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a \"snp/snoop.jsp;\" sequence.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat examples jsp XSS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-2449",
            },
            {
               category: "external",
               summary: "RHBZ#244804",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=244804",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-2449",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-2449",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-2449",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-2449",
            },
         ],
         release_date: "2007-06-13T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat examples jsp XSS",
      },
      {
         cve: "CVE-2007-2450",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-05-24T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "244808",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat host manager XSS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-2450",
            },
            {
               category: "external",
               summary: "RHBZ#244808",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=244808",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-2450",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-2450",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-2450",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-2450",
            },
         ],
         release_date: "2007-06-13T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat host manager XSS",
      },
      {
         cve: "CVE-2007-2788",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2007-05-21T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "250725",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-2788",
            },
            {
               category: "external",
               summary: "RHBZ#250725",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=250725",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-2788",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-2788",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-2788",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-2788",
            },
         ],
         release_date: "2007-05-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Critical",
            },
         ],
         title: "Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit",
      },
      {
         cve: "CVE-2007-2789",
         discovery_date: "2007-05-21T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "250729",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "BMP image parser vulnerability",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-2789",
            },
            {
               category: "external",
               summary: "RHBZ#250729",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=250729",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-2789",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-2789",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-2789",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-2789",
            },
         ],
         release_date: "2007-05-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Critical",
            },
         ],
         title: "BMP image parser vulnerability",
      },
      {
         cve: "CVE-2007-3304",
         discovery_date: "2007-06-19T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "245111",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka \"SIGUSR1 killer.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd scoreboard lack of PID protection",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-3304",
            },
            {
               category: "external",
               summary: "RHBZ#245111",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=245111",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-3304",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-3304",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-3304",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-3304",
            },
         ],
         release_date: "2007-06-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "httpd scoreboard lack of PID protection",
      },
      {
         cve: "CVE-2007-3382",
         discovery_date: "2007-07-12T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "247972",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (\"'\") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat handling of cookies",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-3382",
            },
            {
               category: "external",
               summary: "RHBZ#247972",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=247972",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-3382",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-3382",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-3382",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-3382",
            },
         ],
         release_date: "2007-08-14T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat handling of cookies",
      },
      {
         cve: "CVE-2007-3385",
         discovery_date: "2007-07-12T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "247976",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\\" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat handling of cookie values",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-3385",
            },
            {
               category: "external",
               summary: "RHBZ#247976",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=247976",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-3385",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-3385",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-3385",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-3385",
            },
         ],
         release_date: "2007-08-14T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat handling of cookie values",
      },
      {
         cve: "CVE-2007-4465",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-09-13T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "289511",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "mod_autoindex XSS",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the \"AddDefaultCharset\" directive and are using directory indexes. The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
               title: "Statement",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-4465",
            },
            {
               category: "external",
               summary: "RHBZ#289511",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=289511",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-4465",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-4465",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-4465",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-4465",
            },
         ],
         release_date: "2007-09-13T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "mod_autoindex XSS",
      },
      {
         cve: "CVE-2007-5000",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-12-11T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "419931",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "httpd: mod_imagemap XSS",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-5000",
            },
            {
               category: "external",
               summary: "RHBZ#419931",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=419931",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-5000",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-5000",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5000",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5000",
            },
         ],
         release_date: "2007-12-11T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "httpd: mod_imagemap XSS",
      },
      {
         cve: "CVE-2007-5461",
         discovery_date: "2007-10-14T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "333791",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "Absolute path traversal Apache Tomcat WEBDAV",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-5461",
            },
            {
               category: "external",
               summary: "RHBZ#333791",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=333791",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-5461",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-5461",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-5461",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-5461",
            },
         ],
         release_date: "2007-10-14T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "Absolute path traversal Apache Tomcat WEBDAV",
      },
      {
         cve: "CVE-2007-6306",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2007-12-11T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "421081",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "JFreeChart: XSS vulnerabilities in the image map feature",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-6306",
            },
            {
               category: "external",
               summary: "RHBZ#421081",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=421081",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-6306",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-6306",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-6306",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-6306",
            },
         ],
         release_date: "2007-12-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "JFreeChart: XSS vulnerabilities in the image map feature",
      },
      {
         cve: "CVE-2007-6388",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         discovery_date: "2008-01-02T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "427228",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "apache mod_status cross-site scripting",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2007-6388",
            },
            {
               category: "external",
               summary: "RHBZ#427228",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=427228",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2007-6388",
               url: "https://www.cve.org/CVERecord?id=CVE-2007-6388",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2007-6388",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2007-6388",
            },
         ],
         release_date: "2007-12-29T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "apache mod_status cross-site scripting",
      },
      {
         cve: "CVE-2008-0128",
         discovery_date: "2008-01-23T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "429821",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat5 SSO cookie login information disclosure",
               title: "Vulnerability summary",
            },
         ],
         product_status: {
            fixed: [
               "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
               "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
               "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
               "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
               "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
               "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
               "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
               "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
               "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
               "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
               "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
               "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2008-0128",
            },
            {
               category: "external",
               summary: "RHBZ#429821",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=429821",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2008-0128",
               url: "https://www.cve.org/CVERecord?id=CVE-2008-0128",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-0128",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2008-0128",
            },
         ],
         release_date: "2006-12-20T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2008-06-30T15:33:00+00:00",
               details: "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
               product_ids: [
                  "3AS-RHNSAT4.2:jabberd-0:2.0s10-3.37.rhn.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el3.i386",
                  "3AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "3AS-RHNSAT4.2:openmotif21-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-9.RHEL3.8.i386",
                  "3AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el3.noarch",
                  "3AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel3.i386",
                  "3AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel3.i386",
                  "3AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
                  "4AS-RHNSAT4.2:jabberd-0:2.0s10-3.38.rhn.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386",
                  "4AS-RHNSAT4.2:jfreechart-0:0.9.20-3.rhn.noarch",
                  "4AS-RHNSAT4.2:openmotif21-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386",
                  "4AS-RHNSAT4.2:perl-Crypt-CBC-0:2.24-1.el4.noarch",
                  "4AS-RHNSAT4.2:rhn-apache-0:1.3.27-36.rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modperl-0:1.29-16.rhel4.i386",
                  "4AS-RHNSAT4.2:rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386",
                  "4AS-RHNSAT4.2:tomcat5-0:5.0.30-0jpp_10rh.noarch",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2008:0524",
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat5 SSO cookie login information disclosure",
      },
   ],
}