Oval Definition:	oval:org.mitre.oval:def:23625
Revision Date: 2014-05-26 Version: 20 Title: ELSA-2011:0335: tomcat6 security and bug fix update (Important) Description: Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a crafted request. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2010-4476 CVE-2011-0534 ELSA-2011:0335-01 Platform(s): Oracle Linux 6 Product(s): tomcat6 Definition Synopsis Oracle Linux 6.x AND rpm test tomcat6-docs-webapp is earlier than 0:6.0.24-24.el6_0 OR tomcat6-lib is earlier than 0:6.0.24-24.el6_0 OR tomcat6-webapps is earlier than 0:6.0.24-24.el6_0 OR tomcat6-jsp-2.1-api is earlier than 0:6.0.24-24.el6_0 OR tomcat6-javadoc is earlier than 0:6.0.24-24.el6_0 OR tomcat6-el-2.1-api is earlier than 0:6.0.24-24.el6_0 OR tomcat6-admin-webapps is earlier than 0:6.0.24-24.el6_0 OR tomcat6-servlet-2.5-api is earlier than 0:6.0.24-24.el6_0 OR tomcat6-log4j is earlier than 0:6.0.24-24.el6_0 OR tomcat6 is earlier than 0:6.0.24-24.el6_0
BACK