RHSA-2008:0862: Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServerPages (JSP) technologies.The default security policy in the JULI logging component did not restrictaccess permissions to files. This could be misused by untrusted webapplications to access and write arbitrary files in the context of theTomcat process. (CVE-2007-5342)A directory traversal vulnerability was discovered in the Apache Tomcatwebdav servlet. Under certain configurations, this allowed remote,authenticated users to read files accessible to the local Tomcat process.(CVE-2007-5461)A cross-site scripting vulnerability was discovered in theHttpServletResponse.sendError() method. A remote attacker could injectarbitrary web script or HTML via forged HTTP headers. (CVE-2008-1232)An additional cross-site scripting vulnerability was discovered in the hostmanager application. A remote attacker could inject arbitrary web script orHTML via the hostname parameter. (CVE-2008-1947)A traversal vulnerability was discovered when using a RequestDispatcherin combination with a servlet or JSP. A remote attacker could utilize aspecially-crafted request parameter to access protected web resources.(CVE-2008-2370)An additional traversal vulnerability was discovered when the"allowLinking" and "URIencoding" settings were activated. A remote attackercould use a UTF-8-encoded request to extend their privileges and obtainlocal files accessible to the Tomcat process. (CVE-2008-2938)Users of tomcat should upgrade to these updated packages, which containbackported patches to resolve these issues.