Oval Definition:	oval:org.mitre.oval:def:23078
Revision Date: 2014-05-26 Version: 28 Title: ELSA-2010:0580: tomcat5 security update (Important) Description: Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive information via a crafted header that interferes with "recycling of a buffer." Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-2693 CVE-2009-2696 CVE-2009-2902 CVE-2010-2227 ELSA-2010:0580-01 Platform(s): Oracle Linux 5 Product(s): tomcat5 Definition Synopsis Oracle Linux 5.x AND rpm test tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.9.el5_5 OR tomcat5 is earlier than 0:5.5.23-0jpp.9.el5_5
BACK