RHSA-2007:0326: Important: tomcat security update

Tomcat is a servlet container for Java Servlet and JavaServer Pagestechnologies.Tomcat was found to accept multiple content-length headers in arequest. This could allow attackers to poison a web-cache, bypass webapplication firewall protection, or conduct cross-site scripting attacks. (CVE-2005-2090)Tomcat permitted various characters as path delimiters. If Tomcat was usedbehind certain proxies and configured to only proxy some contexts, anattacker could construct an HTTP request to work around the contextrestriction and potentially access non-proxied content. (CVE-2007-0450)Several applications distributed in the JSP examples displayed unfilteredvalues. If the JSP examples are accessible, these flaws could allow aremote attacker to perform cross-site scripting attacks. (CVE-2006-7195,CVE-2006-7196)The default Tomcat configuration permitted the use of insecureSSL cipher suites including the anonymous cipher suite. (CVE-2007-1858)Directory listings were enabled by default in Tomcat. Information storedunprotected under the document root was visible to anyone if theadministrator did not disable directory listings. (CVE-2006-3835)Users should upgrade to these erratum packages which contain Tomcat version5.5.23 that resolves these issues. Updated jakarta-commons-modelerpackages are also included which correct a bug when used with Tomcat 5.5.23.