Debian update for tomcat5.5 - Secunia Advisories - Vulnerability Intelligence

Debian update for tomcat5.5
Secunia Advisory:	SA28317	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-01-04
Popularity:	5,391 views

Critical:	Less critical
Impact:	Security Bypass Cross Site Scripting Exposure of sensitive information
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 4.0 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2007-3382 CVE-2007-3385 CVE-2007-3386 CVE-2007-5342 CVE-2007-5461

Description: Debian has issued an update for tomcat5.5. This fixes some vulnerabilities and a security issue, which can be exploited by malicious, local users to bypass certain security restrictions, and by malicious people to disclose sensitive information and conduct cross-site scripting attacks. For more information: SA26465 SA26466 SA27398 SA28274 Solution: Apply updated packages. -- Debian 4.0 (stable) -- Source archives: http://security.debian.org/pool/updat...omcat5.5/tomcat5.5_5.5.20.orig.tar.gz Size/MD5 checksum:4796377 5775bae8fac16a0e3a2c913c4768bb37 http://security.debian.org/pool/updat...tomcat5.5/tomcat5.5_5.5.20-2etch1.dsc Size/MD5 checksum: 1277 c2193e917dd759a50b8481177bfcef39 http://security.debian.org/pool/updat...at5.5/tomcat5.5_5.5.20-2etch1.diff.gz Size/MD5 checksum:28422 6df1691cbea55b10e2d2d865b4b2983a Architecture independent packages: http://security.debian.org/pool/updat...btomcat5.5-java_5.5.20-2etch1_all.deb Size/MD5 checksum:2385530 5f6482d73f7507b5f2f050ea825ee800 http://security.debian.org/pool/updat...mcat5.5-webapps_5.5.20-2etch1_all.deb Size/MD5 checksum:1472296 4bc554684655794b1d82db2160d67bea http://security.debian.org/pool/updat...at5.5/tomcat5.5_5.5.20-2etch1_all.deb Size/MD5 checksum:56744 a1de64bb115d03c4d33c28065e0c793a http://security.debian.org/pool/updat...tomcat5.5-admin_5.5.20-2etch1_all.deb Size/MD5 checksum:1162332 ab90aab000037913260361eec812c573 -- Debian GNU/Linux unstable alias sid -- Reportedly, updated packages will be available soon. Original Advisory: http://www.debian.org/security/2008/dsa-1447 Other References: SA26465: http://secunia.com/advisories/26465/ SA26466: http://secunia.com/advisories/26466/ SA27398: http://secunia.com/advisories/27398/ SA28274: http://secunia.com/advisories/28274/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	19
New vulnerabilities:	68
Updated advisories:	62

Moderately // 43 views

Debian update for PHP

Moderately // 75 views

Atarone CMS Multiple Vulnerabilities

Less // 90 views

MetaGauge Directory Traversal Vulnerability

Less // 107 views

H-Sphere webshell4 Cross-Site Scripting and Request Forgery

Moderately // 115 views

CMME Information Disclosure Security Issues

Moderately // 124 views

Debian update for squid

Less // 129 views

SUSE update for mercurial

Moderately // 153 views

SUSE update for openssh

Moderately // 108 views

SUSE update for dovecot and graphicsmagic

Less // 127 views

Fedora update for mediawiki

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.