Oval Definition:	oval:org.mitre.oval:def:24031
Revision Date: 2014-05-26 Version: 32 Title: ELSA-2013:0623: tomcat6 security update (Important) Description: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2012-3546 CVE-2012-4534 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887 ELSA-2013:0623-01 Platform(s): Oracle Linux 6 Product(s): tomcat6 Definition Synopsis Oracle Linux 6.x AND rpm test tomcat6-jsp-2.1-api is earlier than 0:6.0.24-52.el6_4 OR tomcat6-webapps is earlier than 0:6.0.24-52.el6_4 OR tomcat6-docs-webapp is earlier than 0:6.0.24-52.el6_4 OR tomcat6-lib is earlier than 0:6.0.24-52.el6_4 OR tomcat6-javadoc is earlier than 0:6.0.24-52.el6_4 OR tomcat6-el-2.1-api is earlier than 0:6.0.24-52.el6_4 OR tomcat6-servlet-2.5-api is earlier than 0:6.0.24-52.el6_4 OR tomcat6-admin-webapps is earlier than 0:6.0.24-52.el6_4 OR tomcat6 is earlier than 0:6.0.24-52.el6_4
BACK