RHSA-2007:0328: Important: tomcat security update
Tomcat is a servlet container for Java Servlet and JavaServer Pagestechnologies.Tomcat was found to accept multiple content-length headers in arequest. This could allow attackers to poison a web-cache, bypass webapplication firewall protection, or conduct cross-site scripting attacks. (CVE-2005-2090)Tomcat permitted various characters as path delimiters. If Tomcat was usedbehind certain proxies and configured to only proxy some contexts, anattacker could construct an HTTP request to work around the contextrestriction and potentially access non-proxied content. (CVE-2007-0450)The implict-objects.jsp file distributed in the examples webapp displayed anumber of unfiltered header values. If the JSP examples are accessible,this flaw could allow a remote attacker to perform cross-site scriptingattacks. (CVE-2006-7195)Updated jakarta-commons-modeler packages which correct a bug whenused with Tomcat 5.5.23 are also included.Users should upgrade to these erratum packages which contain an update toTomcat that resolves these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:0328?
The severity of RHSA-2007:0328 is classified as important.
How do I fix RHSA-2007:0328?
To fix RHSA-2007:0328, you should update your Tomcat installation to the latest available version.
What types of attacks does RHSA-2007:0328 allow?
RHSA-2007:0328 could allow attackers to poison a web-cache, bypass web application firewalls, or conduct cross-site scripting attacks.
Which versions of Tomcat are affected by RHSA-2007:0328?
RHSA-2007:0328 affects multiple versions of Tomcat, primarily those prior to the patch release.
What is the primary vulnerability in RHSA-2007:0328?
The primary vulnerability in RHSA-2007:0328 is that Tomcat accepts multiple content-length headers in a request.