CVE-2008-3273: Medium severity JBOSS Enterprise Application Platform vulnerability

Published Aug 4, 2008
·
Updated

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.

Other sources

The status servlet exposes details about the deployed servlets and makes it easier to identity the attack surface of an EAP installation.

http://host:8080/status?full=true

Affected Software

245 affected componentsFixes available
redhat/glassfish-javamail<0:1.4.0-0jpp.ep1.9.el4
0:1.4.0-0jpp.ep1.9.el4
redhat/hibernate3<1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4
redhat/hibernate3-annotations<0:3.2.1-1.patch02.1jpp.ep1.3.el4
0:3.2.1-1.patch02.1jpp.ep1.3.el4
redhat/jbossas<0:4.2.0-3.GA_CP03.ep1.9.el4
0:4.2.0-3.GA_CP03.ep1.9.el4
redhat/jboss-cache<0:1.4.1-4.SP9.1jpp.ep1.1.el4
0:1.4.1-4.SP9.1jpp.ep1.1.el4
redhat/jboss-remoting<0:2.2.2-3.SP7.0jpp.ep1.3.el4
0:2.2.2-3.SP7.0jpp.ep1.3.el4
redhat/jboss-seam<0:1.2.1-1.ep1.7.el4
0:1.2.1-1.ep1.7.el4
redhat/jbossts<1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el4
redhat/jcommon<0:1.0.12-1jpp.ep1.3.el4
0:1.0.12-1jpp.ep1.3.el4
redhat/jfreechart<0:1.0.9-1jpp.ep1.3.el4
0:1.0.9-1jpp.ep1.3.el4
redhat/rh-eap-docs<0:4.2.0-3.GA_CP03.ep1.5.el4
0:4.2.0-3.GA_CP03.ep1.5.el4
redhat/hibernate3<1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5
1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5
redhat/hibernate3-annotations<0:3.2.1-1.patch02.1jpp.ep1.3.el5.1
0:3.2.1-1.patch02.1jpp.ep1.3.el5.1
redhat/jbossas<0:4.2.0-4.GA_CP03.ep1.8.el5.1
0:4.2.0-4.GA_CP03.ep1.8.el5.1
redhat/jboss-cache<0:1.4.1-4.SP9.1jpp.ep1.1.el5
0:1.4.1-4.SP9.1jpp.ep1.1.el5
redhat/jboss-remoting<0:2.2.2-3.SP7.0jpp.ep1.3.el5
0:2.2.2-3.SP7.0jpp.ep1.3.el5
redhat/jboss-seam<0:1.2.1-1.ep1.6.el5
0:1.2.1-1.ep1.6.el5
redhat/jbossts<1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el5
1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el5
redhat/jcommon<0:1.0.12-1jpp.ep1.3.el5
0:1.0.12-1jpp.ep1.3.el5
redhat/jfreechart<0:1.0.9-1jpp.ep1.3.el5.1
0:1.0.9-1jpp.ep1.3.el5.1
redhat/rh-eap-docs<0:4.2.0-3.GA_CP03.ep1.5.el5
0:4.2.0-3.GA_CP03.ep1.5.el5
redhat/antlr<0:2.7.6-6.2.2.jdk6.ep5.el5
0:2.7.6-6.2.2.jdk6.ep5.el5
redhat/apache-cxf<0:2.2.6-1.patch_01.7.jdk6.ep5.el5
0:2.2.6-1.patch_01.7.jdk6.ep5.el5
redhat/apache-james<0:0.6-5.2.1.jdk6.ep5.el5
0:0.6-5.2.1.jdk6.ep5.el5
redhat/avalon-framework<0:4.1.5-2.2.1.jdk6.ep5.el5
0:4.1.5-2.2.1.jdk6.ep5.el5
redhat/avalon-logkit<0:1.2-4.3.1.jdk6.ep5.el5
0:1.2-4.3.1.jdk6.ep5.el5
redhat/bcel<0:5.1-16.2.1.2.jdk6.ep5.el5
0:5.1-16.2.1.2.jdk6.ep5.el5
redhat/bsf<0:2.4.0-2.2.2.jdk6.ep5.el5
0:2.4.0-2.2.2.jdk6.ep5.el5
redhat/bsh<0:1.3.0-13.2.2.jdk6.ep5.el5
0:1.3.0-13.2.2.jdk6.ep5.el5
redhat/cglib<0:2.2-5.1.1.1.jdk6.ep5.el5
0:2.2-5.1.1.1.jdk6.ep5.el5
redhat/codehaus-jackson<0:1.3.5-0.1.jdk6.ep5.el5
0:1.3.5-0.1.jdk6.ep5.el5
redhat/codehaus-stax11<0:1.1.2-4.2.3.jdk6.ep5.el5
0:1.1.2-4.2.3.jdk6.ep5.el5
redhat/concurrent<0:1.3.4-10.1.1.jdk6.ep5.el5
0:1.3.4-10.1.1.jdk6.ep5.el5
redhat/dom4j<0:1.6.1-10.4.1.jdk6.ep5.el5
0:1.6.1-10.4.1.jdk6.ep5.el5
redhat/dtdparser<0:1.21-6.1.4.1.jdk6.ep5.el5
0:1.21-6.1.4.1.jdk6.ep5.el5
redhat/ecj3<1:3.3.1.1-3.1.1.1.jdk6.ep5.el5
1:3.3.1.1-3.1.1.1.jdk6.ep5.el5
redhat/facelets<0:1.1.15-0.b1.4.jdk6.ep5.el5
0:1.1.15-0.b1.4.jdk6.ep5.el5
redhat/glassfish-jaf<0:1.1.0-6.2.1.jdk6.ep5.el5
0:1.1.0-6.2.1.jdk6.ep5.el5
redhat/glassfish-javamail<0:1.4.2-0.3.2.jdk6.ep5.el5
0:1.4.2-0.3.2.jdk6.ep5.el5
redhat/glassfish-jaxb<0:2.1.12-5.jdk6.ep5.el5
0:2.1.12-5.jdk6.ep5.el5
redhat/glassfish-jaxws<0:2.1.7-0.20.jdk6.ep5.el5
0:2.1.7-0.20.jdk6.ep5.el5
redhat/glassfish-jsf<0:1.2_13-3.1.1.jdk6.ep5.el5
0:1.2_13-3.1.1.jdk6.ep5.el5
redhat/glassfish-jstl<0:1.2.0-10.6.jdk6.ep5.el5
0:1.2.0-10.6.jdk6.ep5.el5
redhat/gnu-getopt<0:1.0.13-1.1.2.jdk6.ep5.el5
0:1.0.13-1.1.2.jdk6.ep5.el5
redhat/gnu-trove<0:1.0.2-7.1.1.jdk6.ep5.el5
0:1.0.2-7.1.1.jdk6.ep5.el5
redhat/hibernate3<1:3.3.2-1.1.GA_CP03.jdk6.ep5.el5
1:3.3.2-1.1.GA_CP03.jdk6.ep5.el5
redhat/hibernate3-annotations<0:3.4.0-3.1.GA_CP03.jdk6.ep5.el5
0:3.4.0-3.1.GA_CP03.jdk6.ep5.el5
redhat/hibernate3-commons-annotations<0:3.1.0-1.7.jdk6.ep5.el5
0:3.1.0-1.7.jdk6.ep5.el5
redhat/hibernate3-ejb-persistence<3.0-api-1:1.0.2-3.1.jdk6.ep5.el5
3.0-api-1:1.0.2-3.1.jdk6.ep5.el5
redhat/hibernate3-entitymanager<0:3.4.0-4.1.GA_CP03.jdk6.ep5.el5
0:3.4.0-4.1.GA_CP03.jdk6.ep5.el5
redhat/hibernate3-search<0:3.1.1-2.2.GA_CP03.jdk6.ep5.el5
0:3.1.1-2.2.GA_CP03.jdk6.ep5.el5
redhat/hibernate3-validator<0:3.1.0-1.5.2.jdk6.ep5.el5
0:3.1.0-1.5.2.jdk6.ep5.el5
redhat/hornetq-jopr-plugin<0:1.0.0-0.CR2.0.jdk6.ep5.el5
0:1.0.0-0.CR2.0.jdk6.ep5.el5
redhat/hsqldb<1:1.8.0.8-3.patch03.2.ep5.el5
1:1.8.0.8-3.patch03.2.ep5.el5
redhat/i18nlog<0:1.0.10-2.jdk6.ep5.el5
0:1.0.10-2.jdk6.ep5.el5
redhat/icu4j<0:3.4.5-2.3.1.jdk6.ep5.el5
0:3.4.5-2.3.1.jdk6.ep5.el5
redhat/isorelax<1:0-0.4.release20050331.2.1.jdk6.ep5.el5
1:0-0.4.release20050331.2.1.jdk6.ep5.el5
redhat/jacorb-jboss<0:2.3.1-8.1.jdk6.ep5.el5
0:2.3.1-8.1.jdk6.ep5.el5
redhat/jakarta-commons-beanutils<0:1.8.0-4.1.2.1.jdk6.ep5.el5
0:1.8.0-4.1.2.1.jdk6.ep5.el5
redhat/jakarta-commons-codec<0:1.3-9.2.1.1.jdk6.ep5.el5
0:1.3-9.2.1.1.jdk6.ep5.el5
redhat/jakarta-commons-collections<0:3.2-3.5.1.jdk6.ep5.el5
0:3.2-3.5.1.jdk6.ep5.el5
redhat/jakarta-commons-dbcp<0:1.2.1-16.1.jdk6.ep5.el5
0:1.2.1-16.1.jdk6.ep5.el5
redhat/jakarta-commons-digester<0:1.8.1-8.1.jdk6.ep5.el5
0:1.8.1-8.1.jdk6.ep5.el5
redhat/jakarta-commons-discovery<1:0.4-6.1.1.jdk6.ep5.el5
1:0.4-6.1.1.jdk6.ep5.el5
redhat/jakarta-commons-el<0:1.0-19.2.jdk6.ep5.el5
0:1.0-19.2.jdk6.ep5.el5
redhat/jakarta-commons-httpclient<1:3.1-1.2.1.jdk6.ep5.el5
1:3.1-1.2.1.jdk6.ep5.el5
redhat/jakarta-commons-io<0:1.4-1.3.1.jdk6.ep5.el5
0:1.4-1.3.1.jdk6.ep5.el5
redhat/jakarta-commons-lang<0:2.4-1.3.1.jdk6.ep5.el5
0:2.4-1.3.1.jdk6.ep5.el5
redhat/jakarta-commons-logging<0:1.1.1-0.4.1.jdk6.ep5.el5
0:1.1.1-0.4.1.jdk6.ep5.el5
redhat/jakarta-commons-logging-jboss<0:1.1-10.2.1.jdk6.ep5.el5
0:1.1-10.2.1.jdk6.ep5.el5
redhat/jakarta-commons-parent<0:11-2.1.jdk6.ep5.el5
0:11-2.1.jdk6.ep5.el5
redhat/jakarta-commons-pool<0:1.3-11.2.1.jdk6.ep5.el5
0:1.3-11.2.1.jdk6.ep5.el5
redhat/jakarta-commons-transaction<0:1.1-3.2.1.1.jdk6.ep5.el5
0:1.1-3.2.1.1.jdk6.ep5.el5
redhat/jakarta-oro<0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5
0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5
redhat/jakarta-slide-webdavclient<0:2.1-9.5.1.jdk6.ep5.el5
0:2.1-9.5.1.jdk6.ep5.el5
redhat/javacc<0:4.0-6.1.jdk6.ep5.el5
0:4.0-6.1.jdk6.ep5.el5
redhat/javassist<0:3.12.0-1.jdk6.ep5.el5
0:3.12.0-1.jdk6.ep5.el5
redhat/jaxbintros<0:1.0.0-1.1.3.2.jdk6.ep5.el5
0:1.0.0-1.1.3.2.jdk6.ep5.el5
redhat/jaxen<0:1.1.2-5.1.jdk6.ep5.el5
0:1.1.2-5.1.jdk6.ep5.el5
redhat/jboss5-libs<0:5.1.0-1.3.2.1.jdk6.ep5.el5
0:5.1.0-1.3.2.1.jdk6.ep5.el5
redhat/jboss-aop2<0:2.1.6-1.CP01.1.1.jdk6.ep5.el5
0:2.1.6-1.CP01.1.1.jdk6.ep5.el5
redhat/jboss-aspects-common<0:1.0.0-0.b1.1.2.1.1.jdk6.ep5.el5
0:1.0.0-0.b1.1.2.1.1.jdk6.ep5.el5
redhat/jbossas-web<0:5.1.0-52.jdk6.ep5.el5
0:5.1.0-52.jdk6.ep5.el5
redhat/jbossas-ws-cxf-ewp<0:5.1.0-7.jdk6.ep5.el5
0:5.1.0-7.jdk6.ep5.el5
redhat/jboss-bootstrap<0:1.0.1-2.1.1.jdk6.ep5.el5
0:1.0.1-2.1.1.jdk6.ep5.el5
redhat/jboss-cache-core<0:3.2.5-4.jdk6.ep5.el5
0:3.2.5-4.jdk6.ep5.el5
redhat/jboss-cache-pojo<0:3.0.0-4.5.1.1.jdk6.ep5.el5
0:3.0.0-4.5.1.1.jdk6.ep5.el5
redhat/jboss-cl<0:2.0.9-1.jdk6.ep5.el5
0:2.0.9-1.jdk6.ep5.el5
redhat/jboss-cluster-ha-client<0:1.1.1-1.3.1.jdk6.ep5.el5
0:1.1.1-1.3.1.jdk6.ep5.el5
redhat/jboss-cluster-ha-server-api<0:1.1.3-1.jdk6.ep5.el5
0:1.1.3-1.jdk6.ep5.el5
redhat/jboss-cluster-ha-server-cache-jbc<0:2.0.3-1.jdk6.ep5.el5
0:2.0.3-1.jdk6.ep5.el5
redhat/jboss-cluster-ha-server-cache-spi<0:2.0.0-2.3.1.jdk6.ep5.el5
0:2.0.0-2.3.1.jdk6.ep5.el5
redhat/jboss-common-core<0:2.2.16-3.jdk6.ep5.el5
0:2.2.16-3.jdk6.ep5.el5
redhat/jboss-common-logging-jdk<0:2.1.1-1.1.1.jdk6.ep5.el5
0:2.1.1-1.1.1.jdk6.ep5.el5
redhat/jboss-common-logging-log4j<0:2.1.1-1.1.jdk6.ep5.el5
0:2.1.1-1.1.jdk6.ep5.el5
redhat/jboss-common-logging-spi<0:2.1.1-1.1.jdk6.ep5.el5
0:2.1.1-1.1.jdk6.ep5.el5
redhat/jboss-current-invocation-aspects<0:1.0.1-1.5.1.jdk6.ep5.el5
0:1.0.1-1.5.1.jdk6.ep5.el5
redhat/jboss-deployers<0:2.0.10-1.jdk6.ep5.el5
0:2.0.10-1.jdk6.ep5.el5
redhat/jboss-eap5-native<0:5.1.0-12.1.jdk6.ep5.el5
0:5.1.0-12.1.jdk6.ep5.el5
redhat/jboss-ejb3-build<0:1.0.13-0.2.jdk6.ep5.el5
0:1.0.13-0.2.jdk6.ep5.el5
redhat/jboss-ejb3-cache<0:1.0.0-3.4.1.jdk6.ep5.el5
0:1.0.0-3.4.1.jdk6.ep5.el5
redhat/jboss-ejb3-common<0:1.0.2-0.2.jdk6.ep5.el5
0:1.0.2-0.2.jdk6.ep5.el5
redhat/jboss-ejb3-context<0:0.1.1-0.4.jdk6.ep5.el5
0:0.1.1-0.4.jdk6.ep5.el5
redhat/jboss-ejb3-core<0:1.3.6-0.1.jdk6.ep5.el5
0:1.3.6-0.1.jdk6.ep5.el5
redhat/jboss-ejb3-deployers<0:1.1.4-0.3.jdk6.ep5.el5
0:1.1.4-0.3.jdk6.ep5.el5
redhat/jboss-ejb3-endpoint<0:0.1.0-2.4.1.jdk6.ep5.el5
0:0.1.0-2.4.1.jdk6.ep5.el5
redhat/jboss-ejb3-endpoint-deployer<0:0.1.4-1.3.1.1.1.jdk6.ep5.el5
0:0.1.4-1.3.1.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-ext-api<0:1.0.0-3.5.1.1.jdk6.ep5.el5
0:1.0.0-3.5.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-ext-api-impl<0:1.0.0-3.4.1.jdk6.ep5.el5
0:1.0.0-3.4.1.jdk6.ep5.el5
redhat/jboss-ejb3-interceptors<0:1.0.7-0.3.jdk6.ep5.el5
0:1.0.7-0.3.jdk6.ep5.el5
redhat/jboss-ejb3-jpa-int<0:1.0.0-1.1.1.1.jdk6.ep5.el5
0:1.0.0-1.1.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-mc-int<0:1.0.2-1.1.1.jdk6.ep5.el5
0:1.0.2-1.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-metadata<0:1.0.0-2.4.1.1.jdk6.ep5.el5
0:1.0.0-2.4.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-metrics-deployer<0:1.1.0-0.2.jdk6.ep5.el5
0:1.1.0-0.2.jdk6.ep5.el5
redhat/jboss-ejb3-proxy-clustered<0:1.0.3-1.1.1.1.jdk6.ep5.el5
0:1.0.3-1.1.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-proxy-impl<0:1.0.6-1.1.1.1.jdk6.ep5.el5
0:1.0.6-1.1.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-proxy-spi<0:1.0.0-1.3.1.1.jdk6.ep5.el5
0:1.0.0-1.3.1.1.jdk6.ep5.el5
redhat/jboss-ejb3-security<0:1.0.2-0.2.jdk6.ep5.el5
0:1.0.2-0.2.jdk6.ep5.el5
redhat/jboss-ejb3-timeout<0:0.1.1-0.4.jdk6.ep5.el5
0:0.1.1-0.4.jdk6.ep5.el5
redhat/jboss-ejb3-timerservice-spi<0:1.0.0-1.4.1.jdk6.ep5.el5
0:1.0.0-1.4.1.jdk6.ep5.el5
redhat/jboss-ejb3-transactions<0:1.0.2-1.3.1.2.1.jdk6.ep5.el5
0:1.0.2-1.3.1.2.1.jdk6.ep5.el5
redhat/jboss-ejb3-vfs<0:1.0.0-0.alpha1.0.2.jdk6.ep5.el5
0:1.0.0-0.alpha1.0.2.jdk6.ep5.el5
redhat/jboss-el<0:1.0_02-0.CR5.2.jdk6.ep5.el5
0:1.0_02-0.CR5.2.jdk6.ep5.el5
redhat/jboss-integration<0:5.1.0-2.SP1.4.1.1.jdk6.ep5.el5
0:5.1.0-2.SP1.4.1.1.jdk6.ep5.el5
redhat/jboss-javaee<0:5.0.1-2.6.jdk6.ep5.el5
0:5.0.1-2.6.jdk6.ep5.el5
redhat/jboss-jaxr<0:2.0.1-6.jdk6.ep5.el5
0:2.0.1-6.jdk6.ep5.el5
redhat/jboss-jpa-deployers<0:1.0.0-1.3.2.jdk6.ep5.el5
0:1.0.0-1.3.2.jdk6.ep5.el5
redhat/jboss-logbridge<0:1.0.0-3.1.jdk6.ep5.el5
0:1.0.0-3.1.jdk6.ep5.el5
redhat/jboss-logmanager<0:1.1.0-2.1.1.jdk6.ep5.el5
0:1.1.0-2.1.1.jdk6.ep5.el5
redhat/jboss-man<0:2.1.1-4.SP2.1.1.jdk6.ep5.el5
0:2.1.1-4.SP2.1.1.jdk6.ep5.el5
redhat/jboss-mdr<0:2.0.2-3.2.1.jdk6.ep5.el5
0:2.0.2-3.2.1.jdk6.ep5.el5
redhat/jboss-metadata<0:1.0.6-1.jdk6.ep5.el5
0:1.0.6-1.jdk6.ep5.el5
redhat/jboss-microcontainer2<0:2.0.10-3.jdk6.ep5.el5
0:2.0.10-3.jdk6.ep5.el5
redhat/jboss-naming<0:5.0.3-2.2.1.jdk6.ep5.el5
0:5.0.3-2.2.1.jdk6.ep5.el5
redhat/jboss-parent<0:4.0-1.1.jdk6.ep5.el5
0:4.0-1.1.jdk6.ep5.el5
redhat/jboss-reflect<0:2.0.3-4.jdk6.ep5.el5
0:2.0.3-4.jdk6.ep5.el5
redhat/jboss-remoting<0:2.5.3-4.SP1.3.jdk6.ep5.el5
0:2.5.3-4.SP1.3.jdk6.ep5.el5
redhat/jboss-remoting-aspects<0:1.0.3-0.3.jdk6.ep5.el5
0:1.0.3-0.3.jdk6.ep5.el5
redhat/jboss-seam2<0:2.2.2.EAP-14.jdk6.ep5.el5
0:2.2.2.EAP-14.jdk6.ep5.el5
redhat/jboss-seam-int<0:5.1.0-1.jdk6.ep5.el5
0:5.1.0-1.jdk6.ep5.el5
redhat/jboss-security-aspects<0:1.0.0-2.2.1.jdk6.ep5.el5
0:1.0.0-2.2.1.jdk6.ep5.el5
redhat/jboss-security-negotiation<0:2.0.3-2.SP3.2.jdk6.ep5.el5
0:2.0.3-2.SP3.2.jdk6.ep5.el5
redhat/jboss-security-spi<1:2.0.4-4.SP4.1.jdk6.ep5.el5
1:2.0.4-4.SP4.1.jdk6.ep5.el5
redhat/jboss-security-xacml<0:2.0.4-4.1.1.jdk6.ep5.el5
0:2.0.4-4.1.1.jdk6.ep5.el5
redhat/jboss-serialization<0:1.0.4-0.3.jdk6.ep5.el5
0:1.0.4-0.3.jdk6.ep5.el5
redhat/jbosssx2<0:2.0.4-4.SP4.1.jdk6.ep5.el5
0:2.0.4-4.SP4.1.jdk6.ep5.el5
redhat/jboss-threads<0:1.0.0-2.2.1.jdk6.ep5.el5
0:1.0.0-2.2.1.jdk6.ep5.el5
redhat/jboss-transaction-aspects<0:1.0.0-1.4.1.1.jdk6.ep5.el5
0:1.0.0-1.4.1.1.jdk6.ep5.el5
redhat/jbossts<1:4.6.1-5.CP07.1.1.jdk6.ep5.el5
1:4.6.1-5.CP07.1.1.jdk6.ep5.el5
redhat/jboss-vfs2<0:2.2.0-2.jdk6.ep5.el5
0:2.2.0-2.jdk6.ep5.el5
redhat/jbossweb<0:2.1.10-4.1.jdk6.ep5.el5
0:2.1.10-4.1.jdk6.ep5.el5
redhat/jbossws<0:3.1.2-4.SP7.1.1.jdk6.ep5.el5
0:3.1.2-4.SP7.1.1.jdk6.ep5.el5
redhat/jbossws-common<0:1.1.0-2.SP6.1.jdk6.ep5.el5
0:1.1.0-2.SP6.1.jdk6.ep5.el5
redhat/jbossws-framework<0:3.1.2-4.SP8.1.1.jdk6.ep5.el5
0:3.1.2-4.SP8.1.1.jdk6.ep5.el5
redhat/jbossws-parent<0:1.0.8-1.jdk6.ep5.el5
0:1.0.8-1.jdk6.ep5.el5
redhat/jbossws-spi<0:1.1.2-3.SP4.1.jdk6.ep5.el5
0:1.1.2-3.SP4.1.jdk6.ep5.el5
redhat/jbossxb2<0:2.0.1-5.jdk6.ep5.el5
0:2.0.1-5.jdk6.ep5.el5
redhat/jboss-xnio-base<0:1.2.1-3.1.jdk6.ep5.el5
0:1.2.1-3.1.jdk6.ep5.el5
redhat/jboss-xnio-metadata<0:1.0.1-1.3.1.jdk6.ep5.el5
0:1.0.1-1.3.1.jdk6.ep5.el5
redhat/jcip-annotations<0:1.0-2.2.1.jdk6.ep5.el5
0:1.0-2.2.1.jdk6.ep5.el5
redhat/jcommon<0:1.0.16-1.2.1.jdk6.ep5.el5
0:1.0.16-1.2.1.jdk6.ep5.el5
redhat/jdom<0:1.0-4.4.jdk6.ep5.el5
0:1.0-4.4.jdk6.ep5.el5
redhat/jettison<0:1.1-1.4.jdk6.ep5.el5
0:1.1-1.4.jdk6.ep5.el5
redhat/jfreechart<0:1.0.13-2.3.2.1.jdk6.ep5.el5
0:1.0.13-2.3.2.1.jdk6.ep5.el5
redhat/jgroups<1:2.6.16-2.jdk6.ep5.el5
1:2.6.16-2.jdk6.ep5.el5
redhat/joda-time<0:1.5.2-3.1.jdk6.ep5.el5
0:1.5.2-3.1.jdk6.ep5.el5
redhat/joesnmp<0:0.3.4-3.1.jdk6.ep5.el5
0:0.3.4-3.1.jdk6.ep5.el5
redhat/jopr-embedded<0:1.3.4-16.SP1.5.jdk6.ep5.el5
0:1.3.4-16.SP1.5.jdk6.ep5.el5
redhat/jopr-hibernate-plugin<0:3.0.0-8.EmbJopr2.jdk6.ep5.el5
0:3.0.0-8.EmbJopr2.jdk6.ep5.el5
redhat/jopr-jboss-as<5-plugin-0:3.0.0-7.EmbJopr2.jdk6.ep5.el5
5-plugin-0:3.0.0-7.EmbJopr2.jdk6.ep5.el5
redhat/jopr-jboss-cache-v3-plugin<0:3.0.0-6.EmbJopr2.jdk6.ep5.el5
0:3.0.0-6.EmbJopr2.jdk6.ep5.el5
redhat/juddi<0:2.0.1-2.1.jdk6.ep5.el5
0:2.0.1-2.1.jdk6.ep5.el5
redhat/jyaml<0:1.3-3.1.jdk6.ep5.el5
0:1.3-3.1.jdk6.ep5.el5
redhat/log4j<0:1.2.14-18.1.jdk6.ep5.el5
0:1.2.14-18.1.jdk6.ep5.el5
redhat/mockobjects<0:0.09-19.1.1.ep5.el5
0:0.09-19.1.1.ep5.el5
redhat/msv<0:1.2-0.20050722.6.jdk6.ep5.el5
0:1.2-0.20050722.6.jdk6.ep5.el5
redhat/mx4j<1:3.0.1-9.3.1.jdk6.ep5.el5
1:3.0.1-9.3.1.jdk6.ep5.el5
redhat/objectweb-asm<0:3.1-5.3.1.jdk6.ep5.el5
0:3.1-5.3.1.jdk6.ep5.el5
redhat/org-mc4j-ems<0:1.2.15.1-2.jdk6.ep5.el5
0:1.2.15.1-2.jdk6.ep5.el5
redhat/quartz<0:1.5.2-6.3.patch01.jdk6.ep5.el5
0:1.5.2-6.3.patch01.jdk6.ep5.el5
redhat/regexp<0:1.5-1.2.1.jdk6.ep5.el5
0:1.5-1.2.1.jdk6.ep5.el5
redhat/resteasy<0:1.2.1-7.jdk6.ep5.el5
0:1.2.1-7.jdk6.ep5.el5
redhat/rh-ewp-docs<0:5.1.0-5.jdk6.ep5.el5
0:5.1.0-5.jdk6.ep5.el5
redhat/rhq<0:3.0.0-9.EmbJopr2.1.jdk6.ep5.el5
0:3.0.0-9.EmbJopr2.1.jdk6.ep5.el5
redhat/rhq-jmx-plugin<0:3.0.0-12.EmbJopr2.jdk6.ep5.el5
0:3.0.0-12.EmbJopr2.jdk6.ep5.el5
redhat/rhq-platform-plugin<0:3.0.0-9.EmbJopr2.jdk6.ep5.el5
0:3.0.0-9.EmbJopr2.jdk6.ep5.el5
redhat/richfaces<0:3.3.1-0.25.jdk6.ep5.el5
0:3.3.1-0.25.jdk6.ep5.el5
redhat/scannotation<0:1.0.2-3.1.jdk6.ep5.el5
0:1.0.2-3.1.jdk6.ep5.el5
redhat/servletapi4<0:4.0.4-6.2.1.1.jdk6.ep5.el5
0:4.0.4-6.2.1.1.jdk6.ep5.el5
redhat/slf4j<0:1.5.8-1.2.1.jdk6.ep5.el5
0:1.5.8-1.2.1.jdk6.ep5.el5
redhat/slf4j-jboss-logging<0:1.0.2-1.3.1.jdk6.ep5.el5
0:1.0.2-1.3.1.jdk6.ep5.el5
redhat/snmptrapappender<0:1.2.8-7.1.jdk6.ep5.el5
0:1.2.8-7.1.jdk6.ep5.el5
redhat/spring2<0:2.5.6-8.SEC02.2.jdk6.ep5.el5
0:2.5.6-8.SEC02.2.jdk6.ep5.el5
redhat/stax-ex<0:1.2-8.jdk6.ep5.el5
0:1.2-8.jdk6.ep5.el5
redhat/sun-fi<0:1.2.7-4.1.jdk6.ep5.el5
0:1.2.7-4.1.jdk6.ep5.el5
redhat/sun-sjsxp<0:1.0.1-4.1.jdk6.ep5.el5
0:1.0.1-4.1.jdk6.ep5.el5
redhat/sun-ws-metadata<2.0-api-0:1.0.MR1-7.jdk6.ep5.el5
2.0-api-0:1.0.MR1-7.jdk6.ep5.el5
redhat/sun-xmlstreambuffer<0:0.8-0.2.1.jdk6.ep5.el5
0:0.8-0.2.1.jdk6.ep5.el5
redhat/sun-xsom<0:20070515-2.2.1.jdk6.ep5.el5
0:20070515-2.2.1.jdk6.ep5.el5
redhat/tomcat-native<0:1.1.19-4.0.1.jdk6.ep5.el5
0:1.1.19-4.0.1.jdk6.ep5.el5
redhat/velocity<0:1.6.3-0.1.1.1.jdk6.ep5.el5
0:1.6.3-0.1.1.1.jdk6.ep5.el5
redhat/werken-xpath<0:0.9.4-0.beta.13.3.1.jdk6.ep5.el5
0:0.9.4-0.beta.13.3.1.jdk6.ep5.el5
redhat/ws-commons-axiom<0:1.2.7-2.3.jdk6.ep5.el5
0:1.2.7-2.3.jdk6.ep5.el5
redhat/ws-commons-neethi<0:2.0.4-1.2.2.1.jdk6.ep5.el5
0:2.0.4-1.2.2.1.jdk6.ep5.el5
redhat/wsdl4j16<0:1.6.2-7.4.jdk6.ep5.el5
0:1.6.2-7.4.jdk6.ep5.el5
redhat/ws-fx-addressing<0:1.0-3.2.1.jdk6.ep5.el5
0:1.0-3.2.1.jdk6.ep5.el5
redhat/ws-jaxme<0:0.5.1-11.1.jdk6.ep5.el5
0:0.5.1-11.1.jdk6.ep5.el5
redhat/wss4j<0:1.5.8-5.jdk6.ep5.el5
0:1.5.8-5.jdk6.ep5.el5
redhat/ws-scout<0:1.1.1-3.4.1.jdk6.ep5.el5
0:1.1.1-3.4.1.jdk6.ep5.el5
redhat/wstx<0:3.2.9-1.2.jdk6.ep5.el5
0:3.2.9-1.2.jdk6.ep5.el5
redhat/xalan-j2<0:2.7.1-3.2.jdk6.ep5.el5
0:2.7.1-3.2.jdk6.ep5.el5
redhat/xdoclet<0:1.2.3-14.1.jdk6.ep5.el5
0:1.2.3-14.1.jdk6.ep5.el5
redhat/xerces-j2<0:2.9.1-2.3.1.jdk6.ep5.el5
0:2.9.1-2.3.1.jdk6.ep5.el5
redhat/xjavadoc<0:1.1-1.3.1.jdk6.ep5.el5
0:1.1-1.3.1.jdk6.ep5.el5
redhat/xml-commons<0:1.3.04-7.10.jdk6.ep5.el5
0:1.3.04-7.10.jdk6.ep5.el5
redhat/xml-im-exporter<0:1.1-3.1.jdk6.ep5.el5
0:1.1-3.1.jdk6.ep5.el5
redhat/xml-security<0:1.4.3-4.1.jdk6.ep5.el5
0:1.4.3-4.1.jdk6.ep5.el5
redhat/xom<0:1.0-4.1.jdk6.ep5.el5
0:1.0-4.1.jdk6.ep5.el5
redhat/xpp2<0:2.1.10-6.1.jdk6.ep5.el5
0:2.1.10-6.1.jdk6.ep5.el5
redhat/xpp3<0:1.1.4-0.4.1.jdk6.ep5.el5
0:1.1.4-0.4.1.jdk6.ep5.el5
redhat/xstream<0:1.3.1-1.4.1.jdk6.ep5.el5
0:1.3.1-1.4.1.jdk6.ep5.el5
redhat/jboss-aop<0:1.5.5-1.CP01.0jpp.ep1.1.el4
0:1.5.5-1.CP01.0jpp.ep1.1.el4
redhat/jbossas<0:4.3.0-2.GA_CP01.ep1.7.el4
0:4.3.0-2.GA_CP01.ep1.7.el4
redhat/jboss-messaging<0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el4
0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el4
redhat/jboss-seam<0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el4
redhat/jbossws<0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el4
0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el4
redhat/jgroups<1:2.4.2-1.GA_CP01.0jpp.ep1.1.el4
1:2.4.2-1.GA_CP01.0jpp.ep1.1.el4
redhat/rh-eap-docs<0:4.3.0-2.GA_CP01.ep1.4.el4
0:4.3.0-2.GA_CP01.ep1.4.el4
redhat/asm<0:1.5.3-1jpp.ep1.2.el5
0:1.5.3-1jpp.ep1.2.el5
redhat/cglib<0:2.1.3-2jpp.ep1.6.el5
0:2.1.3-2jpp.ep1.6.el5
redhat/concurrent<0:1.3.4-8jpp.ep1.6.el5.1
0:1.3.4-8jpp.ep1.6.el5.1
redhat/glassfish-jsf<0:1.2_08-0jpp.ep1.2.el5
0:1.2_08-0jpp.ep1.2.el5
redhat/hibernate3-entitymanager<0:3.2.1-1jpp.ep1.7.el5
0:3.2.1-1jpp.ep1.7.el5
redhat/jboss-aop<0:1.5.5-1.CP01.0jpp.ep1.1.el5
0:1.5.5-1.CP01.0jpp.ep1.1.el5
redhat/jbossas<0:4.3.0-2.GA_CP01.ep1.6.el5.1
0:4.3.0-2.GA_CP01.ep1.6.el5.1
redhat/jboss-messaging<0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el5
0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el5
redhat/jboss-seam<0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1
redhat/jbossws<0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el5
0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el5
redhat/jbossxb<0:1.0.0-2.SP1.0jpp.ep1.2.el5.1
0:1.0.0-2.SP1.0jpp.ep1.2.el5.1
redhat/jgroups<1:2.4.2-1.GA_CP01.0jpp.ep1.1.el5
1:2.4.2-1.GA_CP01.0jpp.ep1.1.el5
redhat/rh-eap-docs<0:4.3.0-2.GA_CP01.ep1.4.el5
0:4.3.0-2.GA_CP01.ep1.4.el5
JBOSS Enterprise Application Platform<=4.2.0.cp03
JBOSS Enterprise Application Platform<=4.3.0
JBOSS Enterprise Application Platform=4.2.0.cp01
JBOSS Enterprise Application Platform=4.2.0.cp02

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/glassfish-javamail to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-0jpp.ep1.9.el4
  2. Upgrade

    Upgrade redhat/hibernate3 to a version that resolves this vulnerability.

    Fixed in 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4
  3. Upgrade

    Upgrade redhat/hibernate3-annotations to a version that resolves this vulnerability.

    Fixed in 0:3.2.1-1.patch02.1jpp.ep1.3.el4
  4. Upgrade

    Upgrade redhat/jbossas to a version that resolves this vulnerability.

    Fixed in 0:4.2.0-3.GA_CP03.ep1.9.el4
  5. Upgrade

    Upgrade redhat/jboss-cache to a version that resolves this vulnerability.

    Fixed in 0:1.4.1-4.SP9.1jpp.ep1.1.el4
  6. Upgrade

    Upgrade redhat/jboss-remoting to a version that resolves this vulnerability.

    Fixed in 0:2.2.2-3.SP7.0jpp.ep1.3.el4
  7. Upgrade

    Upgrade redhat/jboss-seam to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-1.ep1.7.el4
  8. Upgrade

    Upgrade redhat/jbossts to a version that resolves this vulnerability.

    Fixed in 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el4
  9. Upgrade

    Upgrade redhat/jcommon to a version that resolves this vulnerability.

    Fixed in 0:1.0.12-1jpp.ep1.3.el4
  10. Upgrade

    Upgrade redhat/jfreechart to a version that resolves this vulnerability.

    Fixed in 0:1.0.9-1jpp.ep1.3.el4
  11. Upgrade

    Upgrade redhat/rh-eap-docs to a version that resolves this vulnerability.

    Fixed in 0:4.2.0-3.GA_CP03.ep1.5.el4
  12. Upgrade

    Upgrade redhat/hibernate3 to a version that resolves this vulnerability.

    Fixed in 1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el5
  13. Upgrade

    Upgrade redhat/hibernate3-annotations to a version that resolves this vulnerability.

    Fixed in 0:3.2.1-1.patch02.1jpp.ep1.3.el5.1
  14. Upgrade

    Upgrade redhat/jbossas to a version that resolves this vulnerability.

    Fixed in 0:4.2.0-4.GA_CP03.ep1.8.el5.1
  15. Upgrade

    Upgrade redhat/jboss-cache to a version that resolves this vulnerability.

    Fixed in 0:1.4.1-4.SP9.1jpp.ep1.1.el5
  16. Upgrade

    Upgrade redhat/jboss-remoting to a version that resolves this vulnerability.

    Fixed in 0:2.2.2-3.SP7.0jpp.ep1.3.el5
  17. Upgrade

    Upgrade redhat/jboss-seam to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-1.ep1.6.el5
  18. Upgrade

    Upgrade redhat/jbossts to a version that resolves this vulnerability.

    Fixed in 1:4.2.3-1.SP5_CP01.1jpp.ep1.1.el5
  19. Upgrade

    Upgrade redhat/jcommon to a version that resolves this vulnerability.

    Fixed in 0:1.0.12-1jpp.ep1.3.el5
  20. Upgrade

    Upgrade redhat/jfreechart to a version that resolves this vulnerability.

    Fixed in 0:1.0.9-1jpp.ep1.3.el5.1
  21. Upgrade

    Upgrade redhat/rh-eap-docs to a version that resolves this vulnerability.

    Fixed in 0:4.2.0-3.GA_CP03.ep1.5.el5
  22. Upgrade

    Upgrade redhat/antlr to a version that resolves this vulnerability.

    Fixed in 0:2.7.6-6.2.2.jdk6.ep5.el5
  23. Upgrade

    Upgrade redhat/apache-cxf to a version that resolves this vulnerability.

    Fixed in 0:2.2.6-1.patch_01.7.jdk6.ep5.el5
  24. Upgrade

    Upgrade redhat/apache-james to a version that resolves this vulnerability.

    Fixed in 0:0.6-5.2.1.jdk6.ep5.el5
  25. Upgrade

    Upgrade redhat/avalon-framework to a version that resolves this vulnerability.

    Fixed in 0:4.1.5-2.2.1.jdk6.ep5.el5
  26. Upgrade

    Upgrade redhat/avalon-logkit to a version that resolves this vulnerability.

    Fixed in 0:1.2-4.3.1.jdk6.ep5.el5
  27. Upgrade

    Upgrade redhat/bcel to a version that resolves this vulnerability.

    Fixed in 0:5.1-16.2.1.2.jdk6.ep5.el5
  28. Upgrade

    Upgrade redhat/bsf to a version that resolves this vulnerability.

    Fixed in 0:2.4.0-2.2.2.jdk6.ep5.el5
  29. Upgrade

    Upgrade redhat/bsh to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-13.2.2.jdk6.ep5.el5
  30. Upgrade

    Upgrade redhat/cglib to a version that resolves this vulnerability.

    Fixed in 0:2.2-5.1.1.1.jdk6.ep5.el5
  31. Upgrade

    Upgrade redhat/codehaus-jackson to a version that resolves this vulnerability.

    Fixed in 0:1.3.5-0.1.jdk6.ep5.el5
  32. Upgrade

    Upgrade redhat/codehaus-stax11 to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-4.2.3.jdk6.ep5.el5
  33. Upgrade

    Upgrade redhat/concurrent to a version that resolves this vulnerability.

    Fixed in 0:1.3.4-10.1.1.jdk6.ep5.el5
  34. Upgrade

    Upgrade redhat/dom4j to a version that resolves this vulnerability.

    Fixed in 0:1.6.1-10.4.1.jdk6.ep5.el5
  35. Upgrade

    Upgrade redhat/dtdparser to a version that resolves this vulnerability.

    Fixed in 0:1.21-6.1.4.1.jdk6.ep5.el5
  36. Upgrade

    Upgrade redhat/ecj3 to a version that resolves this vulnerability.

    Fixed in 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5
  37. Upgrade

    Upgrade redhat/facelets to a version that resolves this vulnerability.

    Fixed in 0:1.1.15-0.b1.4.jdk6.ep5.el5
  38. Upgrade

    Upgrade redhat/glassfish-jaf to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-6.2.1.jdk6.ep5.el5
  39. Upgrade

    Upgrade redhat/glassfish-javamail to a version that resolves this vulnerability.

    Fixed in 0:1.4.2-0.3.2.jdk6.ep5.el5
  40. Upgrade

    Upgrade redhat/glassfish-jaxb to a version that resolves this vulnerability.

    Fixed in 0:2.1.12-5.jdk6.ep5.el5
  41. Upgrade

    Upgrade redhat/glassfish-jaxws to a version that resolves this vulnerability.

    Fixed in 0:2.1.7-0.20.jdk6.ep5.el5
  42. Upgrade

    Upgrade redhat/glassfish-jsf to a version that resolves this vulnerability.

    Fixed in 0:1.2_13-3.1.1.jdk6.ep5.el5
  43. Upgrade

    Upgrade redhat/glassfish-jstl to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-10.6.jdk6.ep5.el5
  44. Upgrade

    Upgrade redhat/gnu-getopt to a version that resolves this vulnerability.

    Fixed in 0:1.0.13-1.1.2.jdk6.ep5.el5
  45. Upgrade

    Upgrade redhat/gnu-trove to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-7.1.1.jdk6.ep5.el5
  46. Upgrade

    Upgrade redhat/hibernate3 to a version that resolves this vulnerability.

    Fixed in 1:3.3.2-1.1.GA_CP03.jdk6.ep5.el5
  47. Upgrade

    Upgrade redhat/hibernate3-annotations to a version that resolves this vulnerability.

    Fixed in 0:3.4.0-3.1.GA_CP03.jdk6.ep5.el5
  48. Upgrade

    Upgrade redhat/hibernate3-commons-annotations to a version that resolves this vulnerability.

    Fixed in 0:3.1.0-1.7.jdk6.ep5.el5
  49. Upgrade

    Upgrade redhat/hibernate3-ejb-persistence to a version that resolves this vulnerability.

    Fixed in 3.0-api-1:1.0.2-3.1.jdk6.ep5.el5
  50. Upgrade

    Upgrade redhat/hibernate3-entitymanager to a version that resolves this vulnerability.

    Fixed in 0:3.4.0-4.1.GA_CP03.jdk6.ep5.el5
  51. Upgrade

    Upgrade redhat/hibernate3-search to a version that resolves this vulnerability.

    Fixed in 0:3.1.1-2.2.GA_CP03.jdk6.ep5.el5
  52. Upgrade

    Upgrade redhat/hibernate3-validator to a version that resolves this vulnerability.

    Fixed in 0:3.1.0-1.5.2.jdk6.ep5.el5
  53. Upgrade

    Upgrade redhat/hornetq-jopr-plugin to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-0.CR2.0.jdk6.ep5.el5
  54. Upgrade

    Upgrade redhat/hsqldb to a version that resolves this vulnerability.

    Fixed in 1:1.8.0.8-3.patch03.2.ep5.el5
  55. Upgrade

    Upgrade redhat/i18nlog to a version that resolves this vulnerability.

    Fixed in 0:1.0.10-2.jdk6.ep5.el5
  56. Upgrade

    Upgrade redhat/icu4j to a version that resolves this vulnerability.

    Fixed in 0:3.4.5-2.3.1.jdk6.ep5.el5
  57. Upgrade

    Upgrade redhat/isorelax to a version that resolves this vulnerability.

    Fixed in 1:0-0.4.release20050331.2.1.jdk6.ep5.el5
  58. Upgrade

    Upgrade redhat/jacorb-jboss to a version that resolves this vulnerability.

    Fixed in 0:2.3.1-8.1.jdk6.ep5.el5
  59. Upgrade

    Upgrade redhat/jakarta-commons-beanutils to a version that resolves this vulnerability.

    Fixed in 0:1.8.0-4.1.2.1.jdk6.ep5.el5
  60. Upgrade

    Upgrade redhat/jakarta-commons-codec to a version that resolves this vulnerability.

    Fixed in 0:1.3-9.2.1.1.jdk6.ep5.el5
  61. Upgrade

    Upgrade redhat/jakarta-commons-collections to a version that resolves this vulnerability.

    Fixed in 0:3.2-3.5.1.jdk6.ep5.el5
  62. Upgrade

    Upgrade redhat/jakarta-commons-dbcp to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-16.1.jdk6.ep5.el5
  63. Upgrade

    Upgrade redhat/jakarta-commons-digester to a version that resolves this vulnerability.

    Fixed in 0:1.8.1-8.1.jdk6.ep5.el5
  64. Upgrade

    Upgrade redhat/jakarta-commons-discovery to a version that resolves this vulnerability.

    Fixed in 1:0.4-6.1.1.jdk6.ep5.el5
  65. Upgrade

    Upgrade redhat/jakarta-commons-el to a version that resolves this vulnerability.

    Fixed in 0:1.0-19.2.jdk6.ep5.el5
  66. Upgrade

    Upgrade redhat/jakarta-commons-httpclient to a version that resolves this vulnerability.

    Fixed in 1:3.1-1.2.1.jdk6.ep5.el5
  67. Upgrade

    Upgrade redhat/jakarta-commons-io to a version that resolves this vulnerability.

    Fixed in 0:1.4-1.3.1.jdk6.ep5.el5
  68. Upgrade

    Upgrade redhat/jakarta-commons-lang to a version that resolves this vulnerability.

    Fixed in 0:2.4-1.3.1.jdk6.ep5.el5
  69. Upgrade

    Upgrade redhat/jakarta-commons-logging to a version that resolves this vulnerability.

    Fixed in 0:1.1.1-0.4.1.jdk6.ep5.el5
  70. Upgrade

    Upgrade redhat/jakarta-commons-logging-jboss to a version that resolves this vulnerability.

    Fixed in 0:1.1-10.2.1.jdk6.ep5.el5
  71. Upgrade

    Upgrade redhat/jakarta-commons-parent to a version that resolves this vulnerability.

    Fixed in 0:11-2.1.jdk6.ep5.el5
  72. Upgrade

    Upgrade redhat/jakarta-commons-pool to a version that resolves this vulnerability.

    Fixed in 0:1.3-11.2.1.jdk6.ep5.el5
  73. Upgrade

    Upgrade redhat/jakarta-commons-transaction to a version that resolves this vulnerability.

    Fixed in 0:1.1-3.2.1.1.jdk6.ep5.el5
  74. Upgrade

    Upgrade redhat/jakarta-oro to a version that resolves this vulnerability.

    Fixed in 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5
  75. Upgrade

    Upgrade redhat/jakarta-slide-webdavclient to a version that resolves this vulnerability.

    Fixed in 0:2.1-9.5.1.jdk6.ep5.el5
  76. Upgrade

    Upgrade redhat/javacc to a version that resolves this vulnerability.

    Fixed in 0:4.0-6.1.jdk6.ep5.el5
  77. Upgrade

    Upgrade redhat/javassist to a version that resolves this vulnerability.

    Fixed in 0:3.12.0-1.jdk6.ep5.el5
  78. Upgrade

    Upgrade redhat/jaxbintros to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.1.3.2.jdk6.ep5.el5
  79. Upgrade

    Upgrade redhat/jaxen to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-5.1.jdk6.ep5.el5
  80. Upgrade

    Upgrade redhat/jboss5-libs to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-1.3.2.1.jdk6.ep5.el5
  81. Upgrade

    Upgrade redhat/jboss-aop2 to a version that resolves this vulnerability.

    Fixed in 0:2.1.6-1.CP01.1.1.jdk6.ep5.el5
  82. Upgrade

    Upgrade redhat/jboss-aspects-common to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-0.b1.1.2.1.1.jdk6.ep5.el5
  83. Upgrade

    Upgrade redhat/jbossas-web to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-52.jdk6.ep5.el5
  84. Upgrade

    Upgrade redhat/jbossas-ws-cxf-ewp to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-7.jdk6.ep5.el5
  85. Upgrade

    Upgrade redhat/jboss-bootstrap to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-2.1.1.jdk6.ep5.el5
  86. Upgrade

    Upgrade redhat/jboss-cache-core to a version that resolves this vulnerability.

    Fixed in 0:3.2.5-4.jdk6.ep5.el5
  87. Upgrade

    Upgrade redhat/jboss-cache-pojo to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-4.5.1.1.jdk6.ep5.el5
  88. Upgrade

    Upgrade redhat/jboss-cl to a version that resolves this vulnerability.

    Fixed in 0:2.0.9-1.jdk6.ep5.el5
  89. Upgrade

    Upgrade redhat/jboss-cluster-ha-client to a version that resolves this vulnerability.

    Fixed in 0:1.1.1-1.3.1.jdk6.ep5.el5
  90. Upgrade

    Upgrade redhat/jboss-cluster-ha-server-api to a version that resolves this vulnerability.

    Fixed in 0:1.1.3-1.jdk6.ep5.el5
  91. Upgrade

    Upgrade redhat/jboss-cluster-ha-server-cache-jbc to a version that resolves this vulnerability.

    Fixed in 0:2.0.3-1.jdk6.ep5.el5
  92. Upgrade

    Upgrade redhat/jboss-cluster-ha-server-cache-spi to a version that resolves this vulnerability.

    Fixed in 0:2.0.0-2.3.1.jdk6.ep5.el5
  93. Upgrade

    Upgrade redhat/jboss-common-core to a version that resolves this vulnerability.

    Fixed in 0:2.2.16-3.jdk6.ep5.el5
  94. Upgrade

    Upgrade redhat/jboss-common-logging-jdk to a version that resolves this vulnerability.

    Fixed in 0:2.1.1-1.1.1.jdk6.ep5.el5
  95. Upgrade

    Upgrade redhat/jboss-common-logging-log4j to a version that resolves this vulnerability.

    Fixed in 0:2.1.1-1.1.jdk6.ep5.el5
  96. Upgrade

    Upgrade redhat/jboss-common-logging-spi to a version that resolves this vulnerability.

    Fixed in 0:2.1.1-1.1.jdk6.ep5.el5
  97. Upgrade

    Upgrade redhat/jboss-current-invocation-aspects to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-1.5.1.jdk6.ep5.el5
  98. Upgrade

    Upgrade redhat/jboss-deployers to a version that resolves this vulnerability.

    Fixed in 0:2.0.10-1.jdk6.ep5.el5
  99. Upgrade

    Upgrade redhat/jboss-eap5-native to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-12.1.jdk6.ep5.el5
  100. Upgrade

    Upgrade redhat/jboss-ejb3-build to a version that resolves this vulnerability.

    Fixed in 0:1.0.13-0.2.jdk6.ep5.el5
  101. Upgrade

    Upgrade redhat/jboss-ejb3-cache to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-3.4.1.jdk6.ep5.el5
  102. Upgrade

    Upgrade redhat/jboss-ejb3-common to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-0.2.jdk6.ep5.el5
  103. Upgrade

    Upgrade redhat/jboss-ejb3-context to a version that resolves this vulnerability.

    Fixed in 0:0.1.1-0.4.jdk6.ep5.el5
  104. Upgrade

    Upgrade redhat/jboss-ejb3-core to a version that resolves this vulnerability.

    Fixed in 0:1.3.6-0.1.jdk6.ep5.el5
  105. Upgrade

    Upgrade redhat/jboss-ejb3-deployers to a version that resolves this vulnerability.

    Fixed in 0:1.1.4-0.3.jdk6.ep5.el5
  106. Upgrade

    Upgrade redhat/jboss-ejb3-endpoint to a version that resolves this vulnerability.

    Fixed in 0:0.1.0-2.4.1.jdk6.ep5.el5
  107. Upgrade

    Upgrade redhat/jboss-ejb3-endpoint-deployer to a version that resolves this vulnerability.

    Fixed in 0:0.1.4-1.3.1.1.1.jdk6.ep5.el5
  108. Upgrade

    Upgrade redhat/jboss-ejb3-ext-api to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-3.5.1.1.jdk6.ep5.el5
  109. Upgrade

    Upgrade redhat/jboss-ejb3-ext-api-impl to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-3.4.1.jdk6.ep5.el5
  110. Upgrade

    Upgrade redhat/jboss-ejb3-interceptors to a version that resolves this vulnerability.

    Fixed in 0:1.0.7-0.3.jdk6.ep5.el5
  111. Upgrade

    Upgrade redhat/jboss-ejb3-jpa-int to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.1.1.1.jdk6.ep5.el5
  112. Upgrade

    Upgrade redhat/jboss-ejb3-mc-int to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-1.1.1.jdk6.ep5.el5
  113. Upgrade

    Upgrade redhat/jboss-ejb3-metadata to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-2.4.1.1.jdk6.ep5.el5
  114. Upgrade

    Upgrade redhat/jboss-ejb3-metrics-deployer to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-0.2.jdk6.ep5.el5
  115. Upgrade

    Upgrade redhat/jboss-ejb3-proxy-clustered to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-1.1.1.1.jdk6.ep5.el5
  116. Upgrade

    Upgrade redhat/jboss-ejb3-proxy-impl to a version that resolves this vulnerability.

    Fixed in 0:1.0.6-1.1.1.1.jdk6.ep5.el5
  117. Upgrade

    Upgrade redhat/jboss-ejb3-proxy-spi to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.3.1.1.jdk6.ep5.el5
  118. Upgrade

    Upgrade redhat/jboss-ejb3-security to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-0.2.jdk6.ep5.el5
  119. Upgrade

    Upgrade redhat/jboss-ejb3-timeout to a version that resolves this vulnerability.

    Fixed in 0:0.1.1-0.4.jdk6.ep5.el5
  120. Upgrade

    Upgrade redhat/jboss-ejb3-timerservice-spi to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.4.1.jdk6.ep5.el5
  121. Upgrade

    Upgrade redhat/jboss-ejb3-transactions to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-1.3.1.2.1.jdk6.ep5.el5
  122. Upgrade

    Upgrade redhat/jboss-ejb3-vfs to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-0.alpha1.0.2.jdk6.ep5.el5
  123. Upgrade

    Upgrade redhat/jboss-el to a version that resolves this vulnerability.

    Fixed in 0:1.0_02-0.CR5.2.jdk6.ep5.el5
  124. Upgrade

    Upgrade redhat/jboss-integration to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-2.SP1.4.1.1.jdk6.ep5.el5
  125. Upgrade

    Upgrade redhat/jboss-javaee to a version that resolves this vulnerability.

    Fixed in 0:5.0.1-2.6.jdk6.ep5.el5
  126. Upgrade

    Upgrade redhat/jboss-jaxr to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-6.jdk6.ep5.el5
  127. Upgrade

    Upgrade redhat/jboss-jpa-deployers to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.3.2.jdk6.ep5.el5
  128. Upgrade

    Upgrade redhat/jboss-logbridge to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-3.1.jdk6.ep5.el5
  129. Upgrade

    Upgrade redhat/jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-2.1.1.jdk6.ep5.el5
  130. Upgrade

    Upgrade redhat/jboss-man to a version that resolves this vulnerability.

    Fixed in 0:2.1.1-4.SP2.1.1.jdk6.ep5.el5
  131. Upgrade

    Upgrade redhat/jboss-mdr to a version that resolves this vulnerability.

    Fixed in 0:2.0.2-3.2.1.jdk6.ep5.el5
  132. Upgrade

    Upgrade redhat/jboss-metadata to a version that resolves this vulnerability.

    Fixed in 0:1.0.6-1.jdk6.ep5.el5
  133. Upgrade

    Upgrade redhat/jboss-microcontainer2 to a version that resolves this vulnerability.

    Fixed in 0:2.0.10-3.jdk6.ep5.el5
  134. Upgrade

    Upgrade redhat/jboss-naming to a version that resolves this vulnerability.

    Fixed in 0:5.0.3-2.2.1.jdk6.ep5.el5
  135. Upgrade

    Upgrade redhat/jboss-parent to a version that resolves this vulnerability.

    Fixed in 0:4.0-1.1.jdk6.ep5.el5
  136. Upgrade

    Upgrade redhat/jboss-reflect to a version that resolves this vulnerability.

    Fixed in 0:2.0.3-4.jdk6.ep5.el5
  137. Upgrade

    Upgrade redhat/jboss-remoting to a version that resolves this vulnerability.

    Fixed in 0:2.5.3-4.SP1.3.jdk6.ep5.el5
  138. Upgrade

    Upgrade redhat/jboss-remoting-aspects to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-0.3.jdk6.ep5.el5
  139. Upgrade

    Upgrade redhat/jboss-seam2 to a version that resolves this vulnerability.

    Fixed in 0:2.2.2.EAP-14.jdk6.ep5.el5
  140. Upgrade

    Upgrade redhat/jboss-seam-int to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-1.jdk6.ep5.el5
  141. Upgrade

    Upgrade redhat/jboss-security-aspects to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-2.2.1.jdk6.ep5.el5
  142. Upgrade

    Upgrade redhat/jboss-security-negotiation to a version that resolves this vulnerability.

    Fixed in 0:2.0.3-2.SP3.2.jdk6.ep5.el5
  143. Upgrade

    Upgrade redhat/jboss-security-spi to a version that resolves this vulnerability.

    Fixed in 1:2.0.4-4.SP4.1.jdk6.ep5.el5
  144. Upgrade

    Upgrade redhat/jboss-security-xacml to a version that resolves this vulnerability.

    Fixed in 0:2.0.4-4.1.1.jdk6.ep5.el5
  145. Upgrade

    Upgrade redhat/jboss-serialization to a version that resolves this vulnerability.

    Fixed in 0:1.0.4-0.3.jdk6.ep5.el5
  146. Upgrade

    Upgrade redhat/jbosssx2 to a version that resolves this vulnerability.

    Fixed in 0:2.0.4-4.SP4.1.jdk6.ep5.el5
  147. Upgrade

    Upgrade redhat/jboss-threads to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-2.2.1.jdk6.ep5.el5
  148. Upgrade

    Upgrade redhat/jboss-transaction-aspects to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.4.1.1.jdk6.ep5.el5
  149. Upgrade

    Upgrade redhat/jbossts to a version that resolves this vulnerability.

    Fixed in 1:4.6.1-5.CP07.1.1.jdk6.ep5.el5
  150. Upgrade

    Upgrade redhat/jboss-vfs2 to a version that resolves this vulnerability.

    Fixed in 0:2.2.0-2.jdk6.ep5.el5
  151. Upgrade

    Upgrade redhat/jbossweb to a version that resolves this vulnerability.

    Fixed in 0:2.1.10-4.1.jdk6.ep5.el5
  152. Upgrade

    Upgrade redhat/jbossws to a version that resolves this vulnerability.

    Fixed in 0:3.1.2-4.SP7.1.1.jdk6.ep5.el5
  153. Upgrade

    Upgrade redhat/jbossws-common to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-2.SP6.1.jdk6.ep5.el5
  154. Upgrade

    Upgrade redhat/jbossws-framework to a version that resolves this vulnerability.

    Fixed in 0:3.1.2-4.SP8.1.1.jdk6.ep5.el5
  155. Upgrade

    Upgrade redhat/jbossws-parent to a version that resolves this vulnerability.

    Fixed in 0:1.0.8-1.jdk6.ep5.el5
  156. Upgrade

    Upgrade redhat/jbossws-spi to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-3.SP4.1.jdk6.ep5.el5
  157. Upgrade

    Upgrade redhat/jbossxb2 to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-5.jdk6.ep5.el5
  158. Upgrade

    Upgrade redhat/jboss-xnio-base to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-3.1.jdk6.ep5.el5
  159. Upgrade

    Upgrade redhat/jboss-xnio-metadata to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-1.3.1.jdk6.ep5.el5
  160. Upgrade

    Upgrade redhat/jcip-annotations to a version that resolves this vulnerability.

    Fixed in 0:1.0-2.2.1.jdk6.ep5.el5
  161. Upgrade

    Upgrade redhat/jcommon to a version that resolves this vulnerability.

    Fixed in 0:1.0.16-1.2.1.jdk6.ep5.el5
  162. Upgrade

    Upgrade redhat/jdom to a version that resolves this vulnerability.

    Fixed in 0:1.0-4.4.jdk6.ep5.el5
  163. Upgrade

    Upgrade redhat/jettison to a version that resolves this vulnerability.

    Fixed in 0:1.1-1.4.jdk6.ep5.el5
  164. Upgrade

    Upgrade redhat/jfreechart to a version that resolves this vulnerability.

    Fixed in 0:1.0.13-2.3.2.1.jdk6.ep5.el5
  165. Upgrade

    Upgrade redhat/jgroups to a version that resolves this vulnerability.

    Fixed in 1:2.6.16-2.jdk6.ep5.el5
  166. Upgrade

    Upgrade redhat/joda-time to a version that resolves this vulnerability.

    Fixed in 0:1.5.2-3.1.jdk6.ep5.el5
  167. Upgrade

    Upgrade redhat/joesnmp to a version that resolves this vulnerability.

    Fixed in 0:0.3.4-3.1.jdk6.ep5.el5
  168. Upgrade

    Upgrade redhat/jopr-embedded to a version that resolves this vulnerability.

    Fixed in 0:1.3.4-16.SP1.5.jdk6.ep5.el5
  169. Upgrade

    Upgrade redhat/jopr-hibernate-plugin to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-8.EmbJopr2.jdk6.ep5.el5
  170. Upgrade

    Upgrade redhat/jopr-jboss-as to a version that resolves this vulnerability.

    Fixed in 5-plugin-0:3.0.0-7.EmbJopr2.jdk6.ep5.el5
  171. Upgrade

    Upgrade redhat/jopr-jboss-cache-v3-plugin to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-6.EmbJopr2.jdk6.ep5.el5
  172. Upgrade

    Upgrade redhat/juddi to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-2.1.jdk6.ep5.el5
  173. Upgrade

    Upgrade redhat/jyaml to a version that resolves this vulnerability.

    Fixed in 0:1.3-3.1.jdk6.ep5.el5
  174. Upgrade

    Upgrade redhat/log4j to a version that resolves this vulnerability.

    Fixed in 0:1.2.14-18.1.jdk6.ep5.el5
  175. Upgrade

    Upgrade redhat/mockobjects to a version that resolves this vulnerability.

    Fixed in 0:0.09-19.1.1.ep5.el5
  176. Upgrade

    Upgrade redhat/msv to a version that resolves this vulnerability.

    Fixed in 0:1.2-0.20050722.6.jdk6.ep5.el5
  177. Upgrade

    Upgrade redhat/mx4j to a version that resolves this vulnerability.

    Fixed in 1:3.0.1-9.3.1.jdk6.ep5.el5
  178. Upgrade

    Upgrade redhat/objectweb-asm to a version that resolves this vulnerability.

    Fixed in 0:3.1-5.3.1.jdk6.ep5.el5
  179. Upgrade

    Upgrade redhat/org-mc4j-ems to a version that resolves this vulnerability.

    Fixed in 0:1.2.15.1-2.jdk6.ep5.el5
  180. Upgrade

    Upgrade redhat/quartz to a version that resolves this vulnerability.

    Fixed in 0:1.5.2-6.3.patch01.jdk6.ep5.el5
  181. Upgrade

    Upgrade redhat/regexp to a version that resolves this vulnerability.

    Fixed in 0:1.5-1.2.1.jdk6.ep5.el5
  182. Upgrade

    Upgrade redhat/resteasy to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-7.jdk6.ep5.el5
  183. Upgrade

    Upgrade redhat/rh-ewp-docs to a version that resolves this vulnerability.

    Fixed in 0:5.1.0-5.jdk6.ep5.el5
  184. Upgrade

    Upgrade redhat/rhq to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-9.EmbJopr2.1.jdk6.ep5.el5
  185. Upgrade

    Upgrade redhat/rhq-jmx-plugin to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-12.EmbJopr2.jdk6.ep5.el5
  186. Upgrade

    Upgrade redhat/rhq-platform-plugin to a version that resolves this vulnerability.

    Fixed in 0:3.0.0-9.EmbJopr2.jdk6.ep5.el5
  187. Upgrade

    Upgrade redhat/richfaces to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-0.25.jdk6.ep5.el5
  188. Upgrade

    Upgrade redhat/scannotation to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-3.1.jdk6.ep5.el5
  189. Upgrade

    Upgrade redhat/servletapi4 to a version that resolves this vulnerability.

    Fixed in 0:4.0.4-6.2.1.1.jdk6.ep5.el5
  190. Upgrade

    Upgrade redhat/slf4j to a version that resolves this vulnerability.

    Fixed in 0:1.5.8-1.2.1.jdk6.ep5.el5
  191. Upgrade

    Upgrade redhat/slf4j-jboss-logging to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-1.3.1.jdk6.ep5.el5
  192. Upgrade

    Upgrade redhat/snmptrapappender to a version that resolves this vulnerability.

    Fixed in 0:1.2.8-7.1.jdk6.ep5.el5
  193. Upgrade

    Upgrade redhat/spring2 to a version that resolves this vulnerability.

    Fixed in 0:2.5.6-8.SEC02.2.jdk6.ep5.el5
  194. Upgrade

    Upgrade redhat/stax-ex to a version that resolves this vulnerability.

    Fixed in 0:1.2-8.jdk6.ep5.el5
  195. Upgrade

    Upgrade redhat/sun-fi to a version that resolves this vulnerability.

    Fixed in 0:1.2.7-4.1.jdk6.ep5.el5
  196. Upgrade

    Upgrade redhat/sun-sjsxp to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-4.1.jdk6.ep5.el5
  197. Upgrade

    Upgrade redhat/sun-ws-metadata to a version that resolves this vulnerability.

    Fixed in 2.0-api-0:1.0.MR1-7.jdk6.ep5.el5
  198. Upgrade

    Upgrade redhat/sun-xmlstreambuffer to a version that resolves this vulnerability.

    Fixed in 0:0.8-0.2.1.jdk6.ep5.el5
  199. Upgrade

    Upgrade redhat/sun-xsom to a version that resolves this vulnerability.

    Fixed in 0:20070515-2.2.1.jdk6.ep5.el5
  200. Upgrade

    Upgrade redhat/tomcat-native to a version that resolves this vulnerability.

    Fixed in 0:1.1.19-4.0.1.jdk6.ep5.el5
  201. Upgrade

    Upgrade redhat/velocity to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-0.1.1.1.jdk6.ep5.el5
  202. Upgrade

    Upgrade redhat/werken-xpath to a version that resolves this vulnerability.

    Fixed in 0:0.9.4-0.beta.13.3.1.jdk6.ep5.el5
  203. Upgrade

    Upgrade redhat/ws-commons-axiom to a version that resolves this vulnerability.

    Fixed in 0:1.2.7-2.3.jdk6.ep5.el5
  204. Upgrade

    Upgrade redhat/ws-commons-neethi to a version that resolves this vulnerability.

    Fixed in 0:2.0.4-1.2.2.1.jdk6.ep5.el5
  205. Upgrade

    Upgrade redhat/wsdl4j16 to a version that resolves this vulnerability.

    Fixed in 0:1.6.2-7.4.jdk6.ep5.el5
  206. Upgrade

    Upgrade redhat/ws-fx-addressing to a version that resolves this vulnerability.

    Fixed in 0:1.0-3.2.1.jdk6.ep5.el5
  207. Upgrade

    Upgrade redhat/ws-jaxme to a version that resolves this vulnerability.

    Fixed in 0:0.5.1-11.1.jdk6.ep5.el5
  208. Upgrade

    Upgrade redhat/wss4j to a version that resolves this vulnerability.

    Fixed in 0:1.5.8-5.jdk6.ep5.el5
  209. Upgrade

    Upgrade redhat/ws-scout to a version that resolves this vulnerability.

    Fixed in 0:1.1.1-3.4.1.jdk6.ep5.el5
  210. Upgrade

    Upgrade redhat/wstx to a version that resolves this vulnerability.

    Fixed in 0:3.2.9-1.2.jdk6.ep5.el5
  211. Upgrade

    Upgrade redhat/xalan-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.7.1-3.2.jdk6.ep5.el5
  212. Upgrade

    Upgrade redhat/xdoclet to a version that resolves this vulnerability.

    Fixed in 0:1.2.3-14.1.jdk6.ep5.el5
  213. Upgrade

    Upgrade redhat/xerces-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.9.1-2.3.1.jdk6.ep5.el5
  214. Upgrade

    Upgrade redhat/xjavadoc to a version that resolves this vulnerability.

    Fixed in 0:1.1-1.3.1.jdk6.ep5.el5
  215. Upgrade

    Upgrade redhat/xml-commons to a version that resolves this vulnerability.

    Fixed in 0:1.3.04-7.10.jdk6.ep5.el5
  216. Upgrade

    Upgrade redhat/xml-im-exporter to a version that resolves this vulnerability.

    Fixed in 0:1.1-3.1.jdk6.ep5.el5
  217. Upgrade

    Upgrade redhat/xml-security to a version that resolves this vulnerability.

    Fixed in 0:1.4.3-4.1.jdk6.ep5.el5
  218. Upgrade

    Upgrade redhat/xom to a version that resolves this vulnerability.

    Fixed in 0:1.0-4.1.jdk6.ep5.el5
  219. Upgrade

    Upgrade redhat/xpp2 to a version that resolves this vulnerability.

    Fixed in 0:2.1.10-6.1.jdk6.ep5.el5
  220. Upgrade

    Upgrade redhat/xpp3 to a version that resolves this vulnerability.

    Fixed in 0:1.1.4-0.4.1.jdk6.ep5.el5
  221. Upgrade

    Upgrade redhat/xstream to a version that resolves this vulnerability.

    Fixed in 0:1.3.1-1.4.1.jdk6.ep5.el5
  222. Upgrade

    Upgrade redhat/jboss-aop to a version that resolves this vulnerability.

    Fixed in 0:1.5.5-1.CP01.0jpp.ep1.1.el4
  223. Upgrade

    Upgrade redhat/jbossas to a version that resolves this vulnerability.

    Fixed in 0:4.3.0-2.GA_CP01.ep1.7.el4
  224. Upgrade

    Upgrade redhat/jboss-messaging to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el4
  225. Upgrade

    Upgrade redhat/jboss-seam to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el4
  226. Upgrade

    Upgrade redhat/jbossws to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el4
  227. Upgrade

    Upgrade redhat/jgroups to a version that resolves this vulnerability.

    Fixed in 1:2.4.2-1.GA_CP01.0jpp.ep1.1.el4
  228. Upgrade

    Upgrade redhat/rh-eap-docs to a version that resolves this vulnerability.

    Fixed in 0:4.3.0-2.GA_CP01.ep1.4.el4
  229. Upgrade

    Upgrade redhat/asm to a version that resolves this vulnerability.

    Fixed in 0:1.5.3-1jpp.ep1.2.el5
  230. Upgrade

    Upgrade redhat/cglib to a version that resolves this vulnerability.

    Fixed in 0:2.1.3-2jpp.ep1.6.el5
  231. Upgrade

    Upgrade redhat/concurrent to a version that resolves this vulnerability.

    Fixed in 0:1.3.4-8jpp.ep1.6.el5.1
  232. Upgrade

    Upgrade redhat/glassfish-jsf to a version that resolves this vulnerability.

    Fixed in 0:1.2_08-0jpp.ep1.2.el5
  233. Upgrade

    Upgrade redhat/hibernate3-entitymanager to a version that resolves this vulnerability.

    Fixed in 0:3.2.1-1jpp.ep1.7.el5
  234. Upgrade

    Upgrade redhat/jboss-aop to a version that resolves this vulnerability.

    Fixed in 0:1.5.5-1.CP01.0jpp.ep1.1.el5
  235. Upgrade

    Upgrade redhat/jbossas to a version that resolves this vulnerability.

    Fixed in 0:4.3.0-2.GA_CP01.ep1.6.el5.1
  236. Upgrade

    Upgrade redhat/jboss-messaging to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.SP3_CP02.0jpp.ep1.6.el5
  237. Upgrade

    Upgrade redhat/jboss-seam to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5.1
  238. Upgrade

    Upgrade redhat/jbossws to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-2.SP2_CP01.0jpp.ep1.2.el5
  239. Upgrade

    Upgrade redhat/jbossxb to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-2.SP1.0jpp.ep1.2.el5.1
  240. Upgrade

    Upgrade redhat/jgroups to a version that resolves this vulnerability.

    Fixed in 1:2.4.2-1.GA_CP01.0jpp.ep1.1.el5
  241. Upgrade

    Upgrade redhat/rh-eap-docs to a version that resolves this vulnerability.

    Fixed in 0:4.3.0-2.GA_CP01.ep1.4.el5
  242. Upgrade

    Upgrade JBoss Enterprise Application Platform 4.2 to a version that resolves this vulnerability.

    Fixed in 4.2.0.CP03
  243. Upgrade

    Upgrade JBoss Enterprise Application Platform 4.3 to a version that resolves this vulnerability.

    Fixed in 4.3.0.CP01

Event History

Aug 4, 2008
Data Sourced
01:53 PM
DescriptionSeverityAffected Software
Aug 5, 2008
CVE Published
12:00 AM
Aug 10, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2008-3273?

CVE-2008-3273 has been classified as a moderate severity vulnerability due to the exposure of sensitive information.

2

How do I fix CVE-2008-3273?

To address CVE-2008-3273, update to JBoss Enterprise Application Platform versions 4.2.0.CP03 or 4.3.0.CP01 and later.

3

What types of software are affected by CVE-2008-3273?

CVE-2008-3273 affects multiple JBoss products, including JBoss Enterprise Application Platform versions below 4.2.0.CP03 and 4.3.0 prior to 4.3.0.CP01.

4

What does CVE-2008-3273 expose to attackers?

CVE-2008-3273 allows remote attackers to gain access to sensitive information regarding deployed web contexts through a request to the status servlet.

5

What recommendations do you have for securing systems affected by CVE-2008-3273?

It is recommended to promptly patch affected systems and restrict access to the status servlet to mitigate the risk associated with CVE-2008-3273.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203