(RHSA-2013:0683) Moderate: axis security update

2013-03-2500:00:00

access.redhat.com

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

44.9%

JSON

Apache Axis is an implementation of SOAP (Simple Object Access Protocol).
It can be used to build both web service clients and servers.

Apache Axis did not verify that the server hostname matched the domain name
in the subject’s Common Name (CN) or subjectAltName field in X.509
certificates. This could allow a man-in-the-middle attacker to spoof an SSL
server if they had a certificate that was valid for any domain name.
(CVE-2012-5784)

All users of axis are advised to upgrade to these updated packages, which
correct this issue. Applications using Apache Axis must be restarted for
this update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5i386axis-manual< 1.2.1-2jpp.7.el5_9axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat5x86_64axis-manual< 1.2.1-2jpp.7.el5_9axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm
RedHat5x86_64axis< 1.2.1-2jpp.7.el5_9axis-1.2.1-2jpp.7.el5_9.x86_64.rpm
RedHat5s390xaxis-debuginfo< 1.2.1-2jpp.7.el5_9axis-debuginfo-1.2.1-2jpp.7.el5_9.s390x.rpm
RedHat5i386axis-debuginfo< 1.2.1-2jpp.7.el5_9axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat5i386axis< 1.2.1-2jpp.7.el5_9axis-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat5srcaxis< 1.2.1-2jpp.7.el5_9axis-1.2.1-2jpp.7.el5_9.src.rpm
RedHat5ppcaxis-manual< 1.2.1-2jpp.7.el5_9axis-manual-1.2.1-2jpp.7.el5_9.ppc.rpm
RedHat5ppcaxis-javadoc< 1.2.1-2jpp.7.el5_9axis-javadoc-1.2.1-2jpp.7.el5_9.ppc.rpm
RedHat5s390xaxis-javadoc< 1.2.1-2jpp.7.el5_9axis-javadoc-1.2.1-2jpp.7.el5_9.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	axis-manual	< 1.2.1-2jpp.7.el5_9	axis-manual-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat	5	x86_64	axis-manual	< 1.2.1-2jpp.7.el5_9	axis-manual-1.2.1-2jpp.7.el5_9.x86_64.rpm
RedHat	5	x86_64	axis	< 1.2.1-2jpp.7.el5_9	axis-1.2.1-2jpp.7.el5_9.x86_64.rpm
RedHat	5	s390x	axis-debuginfo	< 1.2.1-2jpp.7.el5_9	axis-debuginfo-1.2.1-2jpp.7.el5_9.s390x.rpm
RedHat	5	i386	axis-debuginfo	< 1.2.1-2jpp.7.el5_9	axis-debuginfo-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat	5	i386	axis	< 1.2.1-2jpp.7.el5_9	axis-1.2.1-2jpp.7.el5_9.i386.rpm
RedHat	5	src	axis	< 1.2.1-2jpp.7.el5_9	axis-1.2.1-2jpp.7.el5_9.src.rpm
RedHat	5	ppc	axis-manual	< 1.2.1-2jpp.7.el5_9	axis-manual-1.2.1-2jpp.7.el5_9.ppc.rpm
RedHat	5	ppc	axis-javadoc	< 1.2.1-2jpp.7.el5_9	axis-javadoc-1.2.1-2jpp.7.el5_9.ppc.rpm
RedHat	5	s390x	axis-javadoc	< 1.2.1-2jpp.7.el5_9	axis-javadoc-1.2.1-2jpp.7.el5_9.s390x.rpm