Moderate: Red Hat Security Advisory: tomcat6 security update

🗓️ 11 Apr 2012 17:12:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 49 Views

Moderate tomcat6 security update addressing predictable hash collisions and inefficient handling of large parameters and values

Reporter	Title	Published	Views	Family All 185
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Cognos BI 8.4.1,10.1, 10.1.1 and 10.2 (CVE-2011-3026, CVE-2011-4858, CVE-2012-0498, CVE-2012-2177, CVE-2012-2193, CVE-2012-4835, CVE-2012-4836, CVE-2012-4837, CVE-2012-4840, CVE-2012-4858, CVE-2012-5081)	28 Nov 202219:30	–	ibm
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Key Lifecycle Manager can be affected by multiple vulnerabilities in Tivoli Integrated Portal (CVE-2013-0464, CVE-2012-3325, CVE-2011-4858)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Storage Productivity Center, multiple security vulnerabilities in IBM Tivoli Integrated Portal (CVE-2013-0464, CVE-2012-3325, CVE-2011-4858)	26 Sep 202222:21	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:56	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified V1.3.2.3 and V1.4.0.0 Include Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Workload Dynamic Console Vulnerability exposure in Tivoli Integrated Portal component	26 Sep 202203:29	–	ibm
Tenable Nessus	Apache Tomcat 5.5.x < 5.5.35 Hash Collision Denial of Service	22 Feb 201200:00	–	nessus
Tenable Nessus	Apache Tomcat 7.0.x < 7.0.23 Hash Collision DoS	22 Feb 201200:00	–	nessus
Tenable Nessus	Apache Tomcat 6.0.x < 6.0.35 Multiple Vulnerabilities	22 Feb 201200:00	–	nessus

Source	Link
tomcat	www.tomcat.apache.org/security-6.html
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Jan 2026 22:34Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

EPSS0.766

apache tomcat java servlet javaserver pages hash collisions cpu time http request parameters limit headers limit cve-2011 cve-2012 ocert package update system properties unix