Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
200

Scientific Linux: Important Tomcat Security Update on SL5.x

Important: tomcat security update. Date: Tue, 2 Sep 2008 14:20:48 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for tomcat on SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Important: tomcat security update Issue date: 2008-08-27 CVE Names: CVE-2008-1232 CVE-2008-1947 CVE-2008-2370 CVE-2008-2938 A cross-site scripting vulnerability was discovered in the HttpServletResponse.sendError() method. A remote attacker could inject arbitrary web script or HTML via forged HTTP headers. (CVE-2008-1232) An additional cross-site scripting vulnerability was discovered in the host manager application. A remote attacker could inject arbitrary web script or HTML via the hostname parameter. (CVE-2008-1947) A traversal vulnerability was discovered when using a RequestDispatcher in combination with a servlet or JSP. A remote attacker could utilize a specially-crafted request parameter to access protected web resources. (CVE-2008-2370) An additional traversal vulnerability was discovered when the "allowLinking" and "URIencoding" settings were activated. A remote attacker could use a UTF-8-encoded request to extend their privileges and obtain local files accessible to the Tomcat process. (CVE-2008-2938) SL 5.x SRPMS: tomcat5-5.5.23-0jpp.7.el5_2.1.src.rpm i386: tomcat5-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-admin-webapps-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-common-lib-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-jasper-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-server-lib-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_2.1.i386.rpm tomcat5-webapps-5.5.23-0jpp.7.el5_2.1.i386.rpm x86_64: tomcat5-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-admin-webapps-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-common-lib-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-jasper-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-jasper-javadoc-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-server-lib-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.7.el5_2.1.x86_64.rpm tomcat5-webapps-5.5.23-0jpp.7.el5_2.1.x86_64.rpm -Connie Sieh -Troy Dawson . Addressing critical Tomcat challenges on Scientific Linux SL5.x: a comprehensive guide for users to navigate successfully.. tomcat Update, security Fix, SL5.x Advisory, Script Issues. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 02, 2008 Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here