Red Hat Security Advisory: tomcat security update for Stronghold
Updated tomcat packages are now available for Stronghold Cross Platform to close a JSP source code exposure vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-1148US | medium5.0 | Exploit | ||
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct r… | ||||
references
External citations — patches, advisories, analysis.
- http://marc.theaimsgroup.com/?l=bugtraq&m=103288242014253&w=2external
- https://access.redhat.com/errata/RHSA-2002:217self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 71144external
- 71167external
- 71175external
- 71177external
- 73724external
remediations (1)
- FixedRed Hat Stronghold 4
The updated packages are now available via the update agent service. Run the command $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/stop-tomcat $ bin/start-tomcat $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2002:217
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan