csaf_redhat - rhsa-2007

rhsa-2007_0871

Vulnerability from csaf_redhat

Published

2007-09-26 08:27

Modified

2024-11-22 02:03

Summary

Red Hat Security Advisory: tomcat security update

Notes

Topic

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

Tomcat is a servlet container for Java Servlet and Java Server Pages technologies. Tomcat was found treating single quote characters -- ' -- as delimiters in cookies. This could allow remote attackers to obtain sensitive information, such as session IDs, for session hijacking attacks (CVE-2007-3382). It was reported Tomcat did not properly handle the following character sequence in a cookie: \" (a backslash followed by a double-quote). It was possible remote attackers could use this failure to obtain sensitive information, such as session IDs, for session hijacking attacks (CVE-2007-3385). A cross-site scripting (XSS) vulnerability existed in the Host Manager Servlet. This allowed remote attackers to inject arbitrary HTML and web script via crafted requests (CVE-2007-3386). Users of Tomcat should update to these erratum packages, which contain backported patches and are not vulnerable to these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated tomcat packages that fix several security issues are now available\nfor Red Hat Enterprise Linux 5. \n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is a servlet container for Java Servlet and Java Server Pages\ntechnologies.\n\nTomcat was found treating single quote characters -- \u0027 -- as delimiters in\ncookies. This could allow remote attackers to obtain sensitive information,\nsuch as session IDs, for session hijacking attacks (CVE-2007-3382).\n\nIt was reported Tomcat did not properly handle the following character\nsequence in a cookie: \\\" (a backslash followed by a double-quote). It was\npossible remote attackers could use this failure to obtain sensitive\ninformation, such as session IDs, for session hijacking attacks\n(CVE-2007-3385).\n\nA cross-site scripting (XSS) vulnerability existed in the Host Manager\nServlet. This allowed remote attackers to inject arbitrary HTML and web\nscript via crafted requests (CVE-2007-3386).\n\nUsers of Tomcat should update to these erratum packages, which contain\nbackported patches and are not vulnerable to these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0871",
        "url": "https://access.redhat.com/errata/RHSA-2007:0871"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "http://tomcat.apache.org/security-5.html",
        "url": "http://tomcat.apache.org/security-5.html"
      },
      {
        "category": "external",
        "summary": "247972",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247972"
      },
      {
        "category": "external",
        "summary": "247976",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247976"
      },
      {
        "category": "external",
        "summary": "247994",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247994"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0871.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat security update",
    "tracking": {
      "current_release_date": "2024-11-22T02:03:52+00:00",
      "generator": {
        "date": "2024-11-22T02:03:52+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2007:0871",
      "initial_release_date": "2007-09-26T08:27:00+00:00",
      "revision_history": [
        {
          "date": "2007-09-26T08:27:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-09-26T04:27:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T02:03:52+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.3.0.2.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.3.0.2.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.3.0.2.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.3.0.2.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-debuginfo@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-server-lib@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper-javadoc@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jasper@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api-javadoc@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-webapps@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-admin-webapps@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-servlet-2.4-api@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-common-lib@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                "product": {
                  "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_id": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat5-jsp-2.0-api@5.5.23-0jpp.3.0.2.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        },
        "product_reference": "tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-3382",
      "discovery_date": "2007-07-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "247972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (\"\u0027\") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat handling of cookies",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3382"
        },
        {
          "category": "external",
          "summary": "RHBZ#247972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3382",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3382"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3382",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3382"
        }
      ],
      "release_date": "2007-08-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-09-26T08:27:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0871"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat handling of cookies"
    },
    {
      "cve": "CVE-2007-3385",
      "discovery_date": "2007-07-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "247976"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\\" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat handling of cookie values",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3385"
        },
        {
          "category": "external",
          "summary": "RHBZ#247976",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247976"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3385"
        }
      ],
      "release_date": "2007-08-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-09-26T08:27:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0871"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat handling of cookie values"
    },
    {
      "cve": "CVE-2007-3386",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2007-07-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "247994"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat host manager xss",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
          "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
          "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3386"
        },
        {
          "category": "external",
          "summary": "RHBZ#247994",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=247994"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3386",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3386"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3386",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3386"
        }
      ],
      "release_date": "2007-08-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-09-26T08:27:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client-Workstation:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client-Workstation:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Client:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Client:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.src",
            "5Server:tomcat5-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-admin-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-common-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.ppc64",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-debuginfo-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jasper-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-jsp-2.0-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-server-lib-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-servlet-2.4-api-javadoc-0:5.5.23-0jpp.3.0.2.el5.x86_64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.i386",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ia64",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.ppc",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.s390x",
            "5Server:tomcat5-webapps-0:5.5.23-0jpp.3.0.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0871"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat host manager xss"
    }
  ]
}

cve-2007-3385

Vulnerability from cvelistv5

Published

2007-08-14 22:00

Modified

2024-08-07 14:14

Severity ?

Summary

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.

References

▼	URL	Tags
	http://www.debian.org/security/2008/dsa-1453	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2007-0950.html	vendor-advisory, x_refsource_REDHAT
	http://support.apple.com/kb/HT2163	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry, x_refsource_VUPEN
	http://securityreason.com/securityalert/3011	third-party-advisory, x_refsource_SREASON
	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/27267	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29242	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/3527	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/26466	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/500412/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/33668	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2902	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/500396/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://exchange.xforce.ibmcloud.com/vulnerabilities/35999	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/26898	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28361	third-party-advisory, x_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562	vendor-advisory, x_refsource_AIXAPAR
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/44183	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28317	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2009/0233	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0871.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2007/3386	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/30802	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0195.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/27037	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1018557	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/25316	vdb-entry, x_refsource_BID
	http://www.kb.cert.org/vuls/id/993544	third-party-advisory, x_refsource_CERT-VN
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/27727	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2008-0261.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/36486	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2008/dsa-1447	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549	vdb-entry, signature, x_refsource_OVAL
	http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	x_refsource_CONFIRM
	http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/476444/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	vendor-advisory, x_refsource_MANDRIVA
	https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:14:12.922Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1453",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1453"
          },
          {
            "name": "RHSA-2007:0950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT2163"
          },
          {
            "name": "ADV-2008-1981",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1981/references"
          },
          {
            "name": "3011",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3011"
          },
          {
            "name": "FEDORA-2007-3456",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
          },
          {
            "name": "27267",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27267"
          },
          {
            "name": "29242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29242"
          },
          {
            "name": "ADV-2007-3527",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3527"
          },
          {
            "name": "26466",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26466"
          },
          {
            "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2008:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
          },
          {
            "name": "33668",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33668"
          },
          {
            "name": "ADV-2007-2902",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2902"
          },
          {
            "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
          },
          {
            "name": "tomcat-slashcookie-information-disclosure(35999)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35999"
          },
          {
            "name": "26898",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26898"
          },
          {
            "name": "28361",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28361"
          },
          {
            "name": "IZ55562",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
          },
          {
            "name": "SSRT071472",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "44183",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44183"
          },
          {
            "name": "28317",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28317"
          },
          {
            "name": "APPLE-SA-2008-06-30",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
          },
          {
            "name": "ADV-2009-0233",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0233"
          },
          {
            "name": "SUSE-SR:2009:004",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "RHSA-2007:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
          },
          {
            "name": "ADV-2007-3386",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3386"
          },
          {
            "name": "30802",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30802"
          },
          {
            "name": "RHSA-2008:0195",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
          },
          {
            "name": "27037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27037"
          },
          {
            "name": "1018557",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1018557"
          },
          {
            "name": "25316",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25316"
          },
          {
            "name": "VU#993544",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/993544"
          },
          {
            "name": "SSRT071447",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "27727",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27727"
          },
          {
            "name": "HPSBUX02262",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "RHSA-2008:0261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
          },
          {
            "name": "36486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36486"
          },
          {
            "name": "HPSBTU02276",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "DSA-1447",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1447"
          },
          {
            "name": "oval:org.mitre.oval:def:9549",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
          },
          {
            "name": "20070814 CVE-2007-3385: Handling of \\\" in cookies",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476444/100/0/threaded"
          },
          {
            "name": "MDKSA-2007:241",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\\" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:08:24",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1453",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1453"
        },
        {
          "name": "RHSA-2007:0950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT2163"
        },
        {
          "name": "ADV-2008-1981",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1981/references"
        },
        {
          "name": "3011",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3011"
        },
        {
          "name": "FEDORA-2007-3456",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
        },
        {
          "name": "27267",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27267"
        },
        {
          "name": "29242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29242"
        },
        {
          "name": "ADV-2007-3527",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3527"
        },
        {
          "name": "26466",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26466"
        },
        {
          "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
        },
        {
          "name": "SUSE-SR:2008:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
        },
        {
          "name": "33668",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33668"
        },
        {
          "name": "ADV-2007-2902",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2902"
        },
        {
          "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
        },
        {
          "name": "tomcat-slashcookie-information-disclosure(35999)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35999"
        },
        {
          "name": "26898",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26898"
        },
        {
          "name": "28361",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28361"
        },
        {
          "name": "IZ55562",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
        },
        {
          "name": "SSRT071472",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "44183",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44183"
        },
        {
          "name": "28317",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28317"
        },
        {
          "name": "APPLE-SA-2008-06-30",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
        },
        {
          "name": "ADV-2009-0233",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0233"
        },
        {
          "name": "SUSE-SR:2009:004",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "RHSA-2007:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
        },
        {
          "name": "ADV-2007-3386",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3386"
        },
        {
          "name": "30802",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30802"
        },
        {
          "name": "RHSA-2008:0195",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
        },
        {
          "name": "27037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27037"
        },
        {
          "name": "1018557",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1018557"
        },
        {
          "name": "25316",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25316"
        },
        {
          "name": "VU#993544",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/993544"
        },
        {
          "name": "SSRT071447",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "27727",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27727"
        },
        {
          "name": "HPSBUX02262",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "RHSA-2008:0261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
        },
        {
          "name": "36486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36486"
        },
        {
          "name": "HPSBTU02276",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "DSA-1447",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1447"
        },
        {
          "name": "oval:org.mitre.oval:def:9549",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
        },
        {
          "name": "20070814 CVE-2007-3385: Handling of \\\" in cookies",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476444/100/0/threaded"
        },
        {
          "name": "MDKSA-2007:241",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-3385",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\\" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1453",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1453"
            },
            {
              "name": "RHSA-2007:0950",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
            },
            {
              "name": "http://support.apple.com/kb/HT2163",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT2163"
            },
            {
              "name": "ADV-2008-1981",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1981/references"
            },
            {
              "name": "3011",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3011"
            },
            {
              "name": "FEDORA-2007-3456",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
            },
            {
              "name": "27267",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27267"
            },
            {
              "name": "29242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29242"
            },
            {
              "name": "ADV-2007-3527",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3527"
            },
            {
              "name": "26466",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26466"
            },
            {
              "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
            },
            {
              "name": "SUSE-SR:2008:005",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
            },
            {
              "name": "33668",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33668"
            },
            {
              "name": "ADV-2007-2902",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2902"
            },
            {
              "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
            },
            {
              "name": "tomcat-slashcookie-information-disclosure(35999)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35999"
            },
            {
              "name": "26898",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26898"
            },
            {
              "name": "28361",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28361"
            },
            {
              "name": "IZ55562",
              "refsource": "AIXAPAR",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
            },
            {
              "name": "SSRT071472",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "44183",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44183"
            },
            {
              "name": "28317",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28317"
            },
            {
              "name": "APPLE-SA-2008-06-30",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
            },
            {
              "name": "ADV-2009-0233",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0233"
            },
            {
              "name": "SUSE-SR:2009:004",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
            },
            {
              "name": "http://tomcat.apache.org/security-6.html",
              "refsource": "CONFIRM",
              "url": "http://tomcat.apache.org/security-6.html"
            },
            {
              "name": "RHSA-2007:0871",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
            },
            {
              "name": "ADV-2007-3386",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3386"
            },
            {
              "name": "30802",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30802"
            },
            {
              "name": "RHSA-2008:0195",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
            },
            {
              "name": "27037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27037"
            },
            {
              "name": "1018557",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1018557"
            },
            {
              "name": "25316",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25316"
            },
            {
              "name": "VU#993544",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/993544"
            },
            {
              "name": "SSRT071447",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "27727",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27727"
            },
            {
              "name": "HPSBUX02262",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "RHSA-2008:0261",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
            },
            {
              "name": "36486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36486"
            },
            {
              "name": "HPSBTU02276",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "DSA-1447",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1447"
            },
            {
              "name": "oval:org.mitre.oval:def:9549",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9549"
            },
            {
              "name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
              "refsource": "CONFIRM",
              "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
            },
            {
              "name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
              "refsource": "CONFIRM",
              "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
            },
            {
              "name": "20070814 CVE-2007-3385: Handling of \\\" in cookies",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/476444/100/0/threaded"
            },
            {
              "name": "MDKSA-2007:241",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-3385",
    "datePublished": "2007-08-14T22:00:00",
    "dateReserved": "2007-06-25T00:00:00",
    "dateUpdated": "2024-08-07T14:14:12.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-3382

Vulnerability from cvelistv5

Published

2007-08-14 22:00

Modified

2024-08-07 14:14

Severity ?

Summary

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.

References

▼	URL	Tags
	http://www.debian.org/security/2008/dsa-1453	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2007-0950.html	vendor-advisory, x_refsource_REDHAT
	http://support.apple.com/kb/HT2163	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/476466/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2008/1981/references	vdb-entry, x_refsource_VUPEN
	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/27267	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/29242	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/3527	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1018556	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/26466	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/500412/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/33668	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2902	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/500396/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/26898	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/28361	third-party-advisory, x_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562	vendor-advisory, x_refsource_AIXAPAR
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/28317	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2009/0233	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0871.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2007/3386	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/30802	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2008-0195.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/27037	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/25316	vdb-entry, x_refsource_BID
	http://www.kb.cert.org/vuls/id/993544	third-party-advisory, x_refsource_CERT-VN
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/27727	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/archive/1/476442/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.redhat.com/support/errata/RHSA-2008-0261.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/36486	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2008/dsa-1447	vendor-advisory, x_refsource_DEBIAN
	http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269	vdb-entry, signature, x_refsource_OVAL
	http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/36006	vdb-entry, x_refsource_XF
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	vendor-advisory, x_refsource_MANDRIVA
	https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:14:12.904Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1453",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1453"
          },
          {
            "name": "RHSA-2007:0950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT2163"
          },
          {
            "name": "20070814 Re: CVE-2007-3382: Handling of cookies containing a \u0027 character",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476466/100/0/threaded"
          },
          {
            "name": "ADV-2008-1981",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1981/references"
          },
          {
            "name": "FEDORA-2007-3456",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
          },
          {
            "name": "27267",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27267"
          },
          {
            "name": "29242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29242"
          },
          {
            "name": "ADV-2007-3527",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3527"
          },
          {
            "name": "1018556",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1018556"
          },
          {
            "name": "26466",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26466"
          },
          {
            "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2008:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
          },
          {
            "name": "33668",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33668"
          },
          {
            "name": "ADV-2007-2902",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2902"
          },
          {
            "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
          },
          {
            "name": "26898",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26898"
          },
          {
            "name": "28361",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28361"
          },
          {
            "name": "IZ55562",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
          },
          {
            "name": "SSRT071472",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "28317",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28317"
          },
          {
            "name": "APPLE-SA-2008-06-30",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
          },
          {
            "name": "ADV-2009-0233",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0233"
          },
          {
            "name": "SUSE-SR:2009:004",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "RHSA-2007:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
          },
          {
            "name": "ADV-2007-3386",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3386"
          },
          {
            "name": "30802",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30802"
          },
          {
            "name": "RHSA-2008:0195",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
          },
          {
            "name": "27037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27037"
          },
          {
            "name": "25316",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25316"
          },
          {
            "name": "VU#993544",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/993544"
          },
          {
            "name": "SSRT071447",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "27727",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27727"
          },
          {
            "name": "HPSBUX02262",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "20070814 CVE-2007-3382: Handling of cookies containing a \u0027 character",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476442/100/0/threaded"
          },
          {
            "name": "RHSA-2008:0261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
          },
          {
            "name": "36486",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36486"
          },
          {
            "name": "HPSBTU02276",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "DSA-1447",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1447"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
          },
          {
            "name": "oval:org.mitre.oval:def:11269",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
          },
          {
            "name": "tomcat-quotecookie-information-disclosure(36006)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36006"
          },
          {
            "name": "MDKSA-2007:241",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (\"\u0027\") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:07:21",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1453",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1453"
        },
        {
          "name": "RHSA-2007:0950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT2163"
        },
        {
          "name": "20070814 Re: CVE-2007-3382: Handling of cookies containing a \u0027 character",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476466/100/0/threaded"
        },
        {
          "name": "ADV-2008-1981",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1981/references"
        },
        {
          "name": "FEDORA-2007-3456",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
        },
        {
          "name": "27267",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27267"
        },
        {
          "name": "29242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29242"
        },
        {
          "name": "ADV-2007-3527",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3527"
        },
        {
          "name": "1018556",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1018556"
        },
        {
          "name": "26466",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26466"
        },
        {
          "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
        },
        {
          "name": "SUSE-SR:2008:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
        },
        {
          "name": "33668",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33668"
        },
        {
          "name": "ADV-2007-2902",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2902"
        },
        {
          "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
        },
        {
          "name": "26898",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26898"
        },
        {
          "name": "28361",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28361"
        },
        {
          "name": "IZ55562",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
        },
        {
          "name": "SSRT071472",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "28317",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28317"
        },
        {
          "name": "APPLE-SA-2008-06-30",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
        },
        {
          "name": "ADV-2009-0233",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0233"
        },
        {
          "name": "SUSE-SR:2009:004",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "RHSA-2007:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
        },
        {
          "name": "ADV-2007-3386",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3386"
        },
        {
          "name": "30802",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30802"
        },
        {
          "name": "RHSA-2008:0195",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
        },
        {
          "name": "27037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27037"
        },
        {
          "name": "25316",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25316"
        },
        {
          "name": "VU#993544",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/993544"
        },
        {
          "name": "SSRT071447",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "27727",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27727"
        },
        {
          "name": "HPSBUX02262",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "20070814 CVE-2007-3382: Handling of cookies containing a \u0027 character",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476442/100/0/threaded"
        },
        {
          "name": "RHSA-2008:0261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
        },
        {
          "name": "36486",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36486"
        },
        {
          "name": "HPSBTU02276",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "DSA-1447",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1447"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
        },
        {
          "name": "oval:org.mitre.oval:def:11269",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
        },
        {
          "name": "tomcat-quotecookie-information-disclosure(36006)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36006"
        },
        {
          "name": "MDKSA-2007:241",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-3382",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes (\"\u0027\") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1453",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1453"
            },
            {
              "name": "RHSA-2007:0950",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0950.html"
            },
            {
              "name": "http://support.apple.com/kb/HT2163",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT2163"
            },
            {
              "name": "20070814 Re: CVE-2007-3382: Handling of cookies containing a \u0027 character",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/476466/100/0/threaded"
            },
            {
              "name": "ADV-2008-1981",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1981/references"
            },
            {
              "name": "FEDORA-2007-3456",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
            },
            {
              "name": "27267",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27267"
            },
            {
              "name": "29242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29242"
            },
            {
              "name": "ADV-2007-3527",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3527"
            },
            {
              "name": "1018556",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1018556"
            },
            {
              "name": "26466",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26466"
            },
            {
              "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
            },
            {
              "name": "SUSE-SR:2008:005",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html"
            },
            {
              "name": "33668",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33668"
            },
            {
              "name": "ADV-2007-2902",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2902"
            },
            {
              "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
            },
            {
              "name": "26898",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26898"
            },
            {
              "name": "28361",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28361"
            },
            {
              "name": "IZ55562",
              "refsource": "AIXAPAR",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55562"
            },
            {
              "name": "SSRT071472",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "28317",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28317"
            },
            {
              "name": "APPLE-SA-2008-06-30",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html"
            },
            {
              "name": "ADV-2009-0233",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0233"
            },
            {
              "name": "SUSE-SR:2009:004",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
            },
            {
              "name": "http://tomcat.apache.org/security-6.html",
              "refsource": "CONFIRM",
              "url": "http://tomcat.apache.org/security-6.html"
            },
            {
              "name": "RHSA-2007:0871",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
            },
            {
              "name": "ADV-2007-3386",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3386"
            },
            {
              "name": "30802",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30802"
            },
            {
              "name": "RHSA-2008:0195",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0195.html"
            },
            {
              "name": "27037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27037"
            },
            {
              "name": "25316",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25316"
            },
            {
              "name": "VU#993544",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/993544"
            },
            {
              "name": "SSRT071447",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "27727",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27727"
            },
            {
              "name": "HPSBUX02262",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "20070814 CVE-2007-3382: Handling of cookies containing a \u0027 character",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/476442/100/0/threaded"
            },
            {
              "name": "RHSA-2008:0261",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html"
            },
            {
              "name": "36486",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36486"
            },
            {
              "name": "HPSBTU02276",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "DSA-1447",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1447"
            },
            {
              "name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
              "refsource": "CONFIRM",
              "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
            },
            {
              "name": "oval:org.mitre.oval:def:11269",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11269"
            },
            {
              "name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
              "refsource": "CONFIRM",
              "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
            },
            {
              "name": "tomcat-quotecookie-information-disclosure(36006)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36006"
            },
            {
              "name": "MDKSA-2007:241",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-3382",
    "datePublished": "2007-08-14T22:00:00",
    "dateReserved": "2007-06-25T00:00:00",
    "dateUpdated": "2024-08-07T14:14:12.904Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-3386

Vulnerability from cvelistv5

Published

2007-08-14 22:00

Modified

2024-08-07 14:14

Severity ?

Summary

Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.

References

▼	URL	Tags
	http://osvdb.org/36417	vdb-entry, x_refsource_OSVDB
	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/27267	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/3527	vdb-entry, x_refsource_VUPEN
	http://jvn.jp/jp/JVN%2359851336/index.html	third-party-advisory, x_refsource_JVN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/36001	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/25314	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/26465	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/500412/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/33668	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/500396/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/26898	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1018558	vdb-entry, x_refsource_SECTRACK
	http://securityreason.com/securityalert/3010	third-party-advisory, x_refsource_SREASON
	http://www.vupen.com/english/advisories/2007/2880	vdb-entry, x_refsource_VUPEN
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/28317	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0233	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0871.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2007/3386	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10077	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/476448/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/27037	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/27727	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554	vendor-advisory, x_refsource_HP
	http://www.debian.org/security/2008/dsa-1447	vendor-advisory, x_refsource_DEBIAN
	http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx	x_refsource_CONFIRM
	http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	vendor-advisory, x_refsource_MANDRIVA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:14:13.015Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "36417",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/36417"
          },
          {
            "name": "FEDORA-2007-3456",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
          },
          {
            "name": "27267",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27267"
          },
          {
            "name": "ADV-2007-3527",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3527"
          },
          {
            "name": "JVN#59851336",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/jp/JVN%2359851336/index.html"
          },
          {
            "name": "tomcat-hostmanager-alias-xss(36001)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36001"
          },
          {
            "name": "25314",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25314"
          },
          {
            "name": "26465",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26465"
          },
          {
            "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
          },
          {
            "name": "33668",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33668"
          },
          {
            "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
          },
          {
            "name": "26898",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26898"
          },
          {
            "name": "1018558",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1018558"
          },
          {
            "name": "3010",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3010"
          },
          {
            "name": "ADV-2007-2880",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2880"
          },
          {
            "name": "SSRT071472",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "28317",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28317"
          },
          {
            "name": "ADV-2009-0233",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0233"
          },
          {
            "name": "SUSE-SR:2009:004",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "RHSA-2007:0871",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
          },
          {
            "name": "ADV-2007-3386",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3386"
          },
          {
            "name": "oval:org.mitre.oval:def:10077",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10077"
          },
          {
            "name": "20070814 CVE-2007-3386: XSS in Host Manager",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/476448/100/0/threaded"
          },
          {
            "name": "27037",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27037"
          },
          {
            "name": "SSRT071447",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "27727",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27727"
          },
          {
            "name": "HPSBUX02262",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "HPSBTU02276",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
          },
          {
            "name": "DSA-1447",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1447"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
          },
          {
            "name": "MDKSA-2007:241",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "36417",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/36417"
        },
        {
          "name": "FEDORA-2007-3456",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
        },
        {
          "name": "27267",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27267"
        },
        {
          "name": "ADV-2007-3527",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3527"
        },
        {
          "name": "JVN#59851336",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/jp/JVN%2359851336/index.html"
        },
        {
          "name": "tomcat-hostmanager-alias-xss(36001)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36001"
        },
        {
          "name": "25314",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25314"
        },
        {
          "name": "26465",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26465"
        },
        {
          "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
        },
        {
          "name": "33668",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33668"
        },
        {
          "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
        },
        {
          "name": "26898",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26898"
        },
        {
          "name": "1018558",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1018558"
        },
        {
          "name": "3010",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3010"
        },
        {
          "name": "ADV-2007-2880",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2880"
        },
        {
          "name": "SSRT071472",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "28317",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28317"
        },
        {
          "name": "ADV-2009-0233",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0233"
        },
        {
          "name": "SUSE-SR:2009:004",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "RHSA-2007:0871",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
        },
        {
          "name": "ADV-2007-3386",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3386"
        },
        {
          "name": "oval:org.mitre.oval:def:10077",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10077"
        },
        {
          "name": "20070814 CVE-2007-3386: XSS in Host Manager",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/476448/100/0/threaded"
        },
        {
          "name": "27037",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27037"
        },
        {
          "name": "SSRT071447",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "27727",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27727"
        },
        {
          "name": "HPSBUX02262",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
        },
        {
          "name": "HPSBTU02276",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
        },
        {
          "name": "DSA-1447",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1447"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
        },
        {
          "name": "MDKSA-2007:241",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-3386",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "36417",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/36417"
            },
            {
              "name": "FEDORA-2007-3456",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html"
            },
            {
              "name": "27267",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27267"
            },
            {
              "name": "ADV-2007-3527",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3527"
            },
            {
              "name": "JVN#59851336",
              "refsource": "JVN",
              "url": "http://jvn.jp/jp/JVN%2359851336/index.html"
            },
            {
              "name": "tomcat-hostmanager-alias-xss(36001)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36001"
            },
            {
              "name": "25314",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25314"
            },
            {
              "name": "26465",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26465"
            },
            {
              "name": "20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500412/100/0/threaded"
            },
            {
              "name": "33668",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33668"
            },
            {
              "name": "20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/500396/100/0/threaded"
            },
            {
              "name": "26898",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26898"
            },
            {
              "name": "1018558",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1018558"
            },
            {
              "name": "3010",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3010"
            },
            {
              "name": "ADV-2007-2880",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2880"
            },
            {
              "name": "SSRT071472",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "28317",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28317"
            },
            {
              "name": "ADV-2009-0233",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0233"
            },
            {
              "name": "SUSE-SR:2009:004",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html"
            },
            {
              "name": "http://tomcat.apache.org/security-6.html",
              "refsource": "CONFIRM",
              "url": "http://tomcat.apache.org/security-6.html"
            },
            {
              "name": "RHSA-2007:0871",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0871.html"
            },
            {
              "name": "ADV-2007-3386",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3386"
            },
            {
              "name": "oval:org.mitre.oval:def:10077",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10077"
            },
            {
              "name": "20070814 CVE-2007-3386: XSS in Host Manager",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/476448/100/0/threaded"
            },
            {
              "name": "27037",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27037"
            },
            {
              "name": "SSRT071447",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "27727",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27727"
            },
            {
              "name": "HPSBUX02262",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "HPSBTU02276",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01192554"
            },
            {
              "name": "DSA-1447",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1447"
            },
            {
              "name": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx",
              "refsource": "CONFIRM",
              "url": "http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx"
            },
            {
              "name": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540",
              "refsource": "CONFIRM",
              "url": "http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540"
            },
            {
              "name": "MDKSA-2007:241",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:241"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-3386",
    "datePublished": "2007-08-14T22:00:00",
    "dateReserved": "2007-06-25T00:00:00",
    "dateUpdated": "2024-08-07T14:14:13.015Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2007_0871

Vulnerability from csaf_redhat

cve-2007-3385

Vulnerability from cvelistv5

cve-2007-3382

Vulnerability from cvelistv5

cve-2007-3386

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature