Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/F4457D571C8377FC24A3BA6F6AED564A
HistoryJan 14, 2010 - 12:00 a.m.

Security fix for the ALT Linux 5 package tomcat6 version 0:6.0.18-alt6_8jpp5

2010-01-1400:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Jan. 14, 2010 Slava Semushin 0:6.0.18-alt6_8jpp5

- NMU
- Applied upstream patches to fix following vulnerabilities:
  + CVE-2009-0033: DoS when using Java AJP connector
    (Closes: [#20313](<https://bugzilla.altlinux.org/20313>))
  + CVE-2009-0580: User enumeration vulnerability with FORM authentication
    (Closes: [#20315](<https://bugzilla.altlinux.org/20315>))
  + CVE-2009-0781: XSS in calendar example
Rows per page:
1-10 of 111

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P