RedHatRHSA-2011:0211(RHSA-2011:0211) Important: jbossweb security update
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.041 Low
EPSS
Percentile
91.2%
JBoss Web Server is a web container based on Apache Tomcat. It provides a
single deployment platform for the JavaServer Pages (JSP) and Java Servlet
technologies.
A denial of service flaw was found in the way certain strings were
converted to Double objects. A remote attacker could use this flaw to cause
JBoss Web Server to hang via a specially-crafted HTTP request.
(CVE-2010-4476)
Users of JBoss Web Server should upgrade to these updated packages, which
contain a backported patch to correct this issue. The JBoss server process
must be restarted for this update to take effect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | noarch | jbossweb-jsp-2.1-api | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
| RedHat | 5 | src | jbossweb | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-2.1.10-5.patch01.1.1.ep5.el5.src.rpm |
| RedHat | 5 | noarch | jbossweb-servlet-2.5-api | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-servlet-2.5-api-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
| RedHat | 5 | noarch | jbossweb-lib | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-lib-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
| RedHat | 5 | noarch | jbossweb | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.041 Low
EPSS
Percentile
91.2%