Red Hat Security Advisory: tomcat security update for Stronghold
Updated tomcat packages are now available for Stronghold Cross Platform to close a JSP source code exposure vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2002-1148US | medium5.0 | Exploit | ||
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct r… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://marc.theaimsgroup.com/?l=bugtraq&m=103288242014253&w=2external
- https://access.redhat.com/errata/RHSA-2002:217self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 71144external
- 71167external
- 71175external
- 71177external
- 73724external
Behebungen (1)
- BehobenRed Hat Stronghold 4
The updated packages are now available via the update agent service. Run the command $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/stop-tomcat $ bin/start-tomcat $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2002:217
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan