Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2014-0226 (GCVE-0-2014-0226)
Vulnerability from cvelistv5 – Published: 2014-07-20 10:00 – Updated: 2024-08-06 09:05
VLAI
EPSS
Summary
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
55 references
Date Public
2014-07-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T09:05:39.328Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "HPSBUX03512",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://advisories.mageia.org/MGASA-2014-0305.html"
},
{
"name": "DSA-2989",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2014/dsa-2989"
},
{
"name": "68678",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/68678"
},
{
"name": "HPSBMU03409",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT204659"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c"
},
{
"name": "GLSA-201408-12",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-201408-12.xml"
},
{
"name": "GLSA-201504-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201504-03"
},
{
"name": "RHSA-2014:1020",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1020.html"
},
{
"name": "60536",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/60536"
},
{
"name": "20140721 Apache HTTPd - description of the CVE-2014-0226.",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2014/Jul/114"
},
{
"name": "HPSBMU03380",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
},
{
"name": "SSRT102066",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://zerodayinitiative.com/advisories/ZDI-14-236/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246"
},
{
"name": "RHSA-2014:1021",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1021.html"
},
{
"name": "SSRT102254",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h"
},
{
"name": "APPLE-SA-2015-04-08-2",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
},
{
"name": "MDVSA-2014:142",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:142"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://puppet.com/security/cve/cve-2014-0226"
},
{
"name": "RHSA-2014:1019",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1019.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://advisories.mageia.org/MGASA-2014-0304.html"
},
{
"name": "109216",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/109216"
},
{
"name": "34133",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "http://www.exploit-db.com/exploits/34133"
},
{
"name": "HPSBUX03337",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.povonsec.com/apache-2-4-7-exploit/"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [9/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-07-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-06T10:11:37.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "HPSBUX03512",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://advisories.mageia.org/MGASA-2014-0305.html"
},
{
"name": "DSA-2989",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2014/dsa-2989"
},
{
"name": "68678",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/68678"
},
{
"name": "HPSBMU03409",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT204659"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c"
},
{
"name": "GLSA-201408-12",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-201408-12.xml"
},
{
"name": "GLSA-201504-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201504-03"
},
{
"name": "RHSA-2014:1020",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1020.html"
},
{
"name": "60536",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/60536"
},
{
"name": "20140721 Apache HTTPd - description of the CVE-2014-0226.",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2014/Jul/114"
},
{
"name": "HPSBMU03380",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
},
{
"name": "SSRT102066",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://zerodayinitiative.com/advisories/ZDI-14-236/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246"
},
{
"name": "RHSA-2014:1021",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1021.html"
},
{
"name": "SSRT102254",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h"
},
{
"name": "APPLE-SA-2015-04-08-2",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
},
{
"name": "MDVSA-2014:142",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:142"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://puppet.com/security/cve/cve-2014-0226"
},
{
"name": "RHSA-2014:1019",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2014-1019.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://advisories.mageia.org/MGASA-2014-0304.html"
},
{
"name": "109216",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/109216"
},
{
"name": "34133",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "http://www.exploit-db.com/exploits/34133"
},
{
"name": "HPSBUX03337",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.povonsec.com/apache-2-4-7-exploit/"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [9/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2014-0226",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "HPSBUX03512",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "http://advisories.mageia.org/MGASA-2014-0305.html",
"refsource": "CONFIRM",
"url": "http://advisories.mageia.org/MGASA-2014-0305.html"
},
{
"name": "DSA-2989",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2014/dsa-2989"
},
{
"name": "68678",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/68678"
},
{
"name": "HPSBMU03409",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2"
},
{
"name": "https://support.apple.com/HT204659",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT204659"
},
{
"name": "http://httpd.apache.org/security/vulnerabilities_24.html",
"refsource": "CONFIRM",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
},
{
"name": "http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES"
},
{
"name": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c"
},
{
"name": "GLSA-201408-12",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-201408-12.xml"
},
{
"name": "GLSA-201504-03",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201504-03"
},
{
"name": "RHSA-2014:1020",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1020.html"
},
{
"name": "60536",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/60536"
},
{
"name": "20140721 Apache HTTPd - description of the CVE-2014-0226.",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2014/Jul/114"
},
{
"name": "HPSBMU03380",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2"
},
{
"name": "SSRT102066",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
},
{
"name": "http://zerodayinitiative.com/advisories/ZDI-14-236/",
"refsource": "MISC",
"url": "http://zerodayinitiative.com/advisories/ZDI-14-236/"
},
{
"name": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"name": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246",
"refsource": "CONFIRM",
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246"
},
{
"name": "RHSA-2014:1021",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1021.html"
},
{
"name": "SSRT102254",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h"
},
{
"name": "APPLE-SA-2015-04-08-2",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
},
{
"name": "MDVSA-2014:142",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:142"
},
{
"name": "https://puppet.com/security/cve/cve-2014-0226",
"refsource": "CONFIRM",
"url": "https://puppet.com/security/cve/cve-2014-0226"
},
{
"name": "RHSA-2014:1019",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2014-1019.html"
},
{
"name": "http://advisories.mageia.org/MGASA-2014-0304.html",
"refsource": "CONFIRM",
"url": "http://advisories.mageia.org/MGASA-2014-0304.html"
},
{
"name": "109216",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/109216"
},
{
"name": "34133",
"refsource": "EXPLOIT-DB",
"url": "http://www.exploit-db.com/exploits/34133"
},
{
"name": "HPSBUX03337",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2"
},
{
"name": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c",
"refsource": "CONFIRM",
"url": "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "https://www.povonsec.com/apache-2-4-7-exploit/",
"refsource": "MISC",
"url": "https://www.povonsec.com/apache-2-4-7-exploit/"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [9/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2014-0226",
"datePublished": "2014-07-20T10:00:00.000Z",
"dateReserved": "2013-12-03T00:00:00.000Z",
"dateUpdated": "2024-08-06T09:05:39.328Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-0226",
"date": "2026-05-29",
"epss": "0.75444",
"percentile": "0.98912"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.2.0\", \"versionEndExcluding\": \"2.2.29\", \"matchCriteriaId\": \"E3EB5B9F-5ED4-411A-81BF-80EC785BA718\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.4.1\", \"versionEndExcluding\": \"2.4.10\", \"matchCriteriaId\": \"58662204-56C2-495F-A833-3D618F8AE199\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16F59A04-14CF-49E2-9973-645477EA09DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B1ABA871-3271-48E2-A69C-5AD70AF94E53\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE885A2E-041B-4E9E-A5A9-13EBD45061FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA2CF507-AA3F-464C-88DF-71E30672E623\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:http_server:10.1.3.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2E69311-C5B8-45FA-809F-ADAE4E35559D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"911FBD5E-213D-482F-81A9-C3B8CE7D903A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:http_server:12.1.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DACC1F65-5AF7-4CD4-ACD2-46D941A19110\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:http_server:12.1.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD4552F9-F5B9-4A52-BA5C-D32D49FABD28\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:secure_global_desktop:4.63:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F27D9960-00E7-4261-850B-D417858F88A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:secure_global_desktop:4.71:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E7F2CF7-CCB3-4EB7-AE44-637C12D97428\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:secure_global_desktop:5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"31356F14-F939-4552-8727-99B41B4BFF5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:secure_global_desktop:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B65FC68F-1348-462A-84EE-E8B7838A5524\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.\"}, {\"lang\": \"es\", \"value\": \"Condici\\u00f3n de carrera en el m\\u00f3dulo mod_status en Apache HTTP Server anterior a 2.4.10 permite a atacantes remotos causar una denegaci\\u00f3n de servicio (desbordamiento de buffer basado en memoria din\\u00e1mica), o posiblemente obtener informaci\\u00f3n sensible de credenciales o ejecutar c\\u00f3digo arbitrario, a trav\\u00e9s de una solicitud manipulada que provoca el manejo indebido de la tabla de clasificaci\\u00f3n (scoreboard) dentro de la funci\\u00f3n status_handler en modules/generators/mod_status.c y la funci\\u00f3n lua_ap_scoreboard_worker en modules/lua/lua_request.c.\"}]",
"id": "CVE-2014-0226",
"lastModified": "2024-11-21T02:01:41.987",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2014-07-20T11:12:48.933",
"references": "[{\"url\": \"http://advisories.mageia.org/MGASA-2014-0304.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://advisories.mageia.org/MGASA-2014-0305.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://httpd.apache.org/security/vulnerabilities_24.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Broken Link\", \"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1019.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1020.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1021.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2014/Jul/114\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/60536\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Not Applicable\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201408-12.xml\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2014/dsa-2989\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.exploit-db.com/exploits/34133\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.osvdb.org/109216\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.securityfocus.com/bid/68678\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://zerodayinitiative.com/advisories/ZDI-14-236/\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1120603\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://puppet.com/security/cve/cve-2014-0226\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201504-03\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/HT204659\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.povonsec.com/apache-2-4-7-exploit/\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://advisories.mageia.org/MGASA-2014-0304.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://advisories.mageia.org/MGASA-2014-0305.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://httpd.apache.org/security/vulnerabilities_24.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Mailing List\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1019.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-1021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2014/Jul/114\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://secunia.com/advisories/60536\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Not Applicable\"]}, {\"url\": \"http://security.gentoo.org/glsa/glsa-201408-12.xml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.debian.org/security/2014/dsa-2989\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.exploit-db.com/exploits/34133\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.osvdb.org/109216\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}, {\"url\": \"http://www.securityfocus.com/bid/68678\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://zerodayinitiative.com/advisories/ZDI-14-236/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1120603\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://puppet.com/security/cve/cve-2014-0226\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201504-03\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/HT204659\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.povonsec.com/apache-2-4-7-exploit/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-362\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-0226\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2014-07-20T11:12:48.933\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.\"},{\"lang\":\"es\",\"value\":\"Condici\u00f3n de carrera en el m\u00f3dulo mod_status en Apache HTTP Server anterior a 2.4.10 permite a atacantes remotos causar una denegaci\u00f3n de servicio (desbordamiento de buffer basado en memoria din\u00e1mica), o posiblemente obtener informaci\u00f3n sensible de credenciales o ejecutar c\u00f3digo arbitrario, a trav\u00e9s de una solicitud manipulada que provoca el manejo indebido de la tabla de clasificaci\u00f3n (scoreboard) dentro de la funci\u00f3n status_handler en modules/generators/mod_status.c y la funci\u00f3n lua_ap_scoreboard_worker en modules/lua/lua_request.c.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-362\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndExcluding\":\"2.2.29\",\"matchCriteriaId\":\"E3EB5B9F-5ED4-411A-81BF-80EC785BA718\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.4.1\",\"versionEndExcluding\":\"2.4.10\",\"matchCriteriaId\":\"58662204-56C2-495F-A833-3D618F8AE199\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1ABA871-3271-48E2-A69C-5AD70AF94E53\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE885A2E-041B-4E9E-A5A9-13EBD45061FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA2CF507-AA3F-464C-88DF-71E30672E623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:http_server:10.1.3.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E69311-C5B8-45FA-809F-ADAE4E35559D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"911FBD5E-213D-482F-81A9-C3B8CE7D903A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:http_server:12.1.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DACC1F65-5AF7-4CD4-ACD2-46D941A19110\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:http_server:12.1.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD4552F9-F5B9-4A52-BA5C-D32D49FABD28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_global_desktop:4.63:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F27D9960-00E7-4261-850B-D417858F88A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_global_desktop:4.71:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E7F2CF7-CCB3-4EB7-AE44-637C12D97428\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_global_desktop:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31356F14-F939-4552-8727-99B41B4BFF5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:secure_global_desktop:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B65FC68F-1348-462A-84EE-E8B7838A5524\"}]}]}],\"references\":[{\"url\":\"http://advisories.mageia.org/MGASA-2014-0304.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://advisories.mageia.org/MGASA-2014-0305.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://httpd.apache.org/security/vulnerabilities_24.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\",\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1019.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1020.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1021.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://seclists.org/fulldisclosure/2014/Jul/114\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/60536\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201408-12.xml\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2014/dsa-2989\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.exploit-db.com/exploits/34133\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.osvdb.org/109216\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securityfocus.com/bid/68678\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://zerodayinitiative.com/advisories/ZDI-14-236/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1120603\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://puppet.com/security/cve/cve-2014-0226\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-03\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT204659\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.povonsec.com/apache-2-4-7-exploit/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://advisories.mageia.org/MGASA-2014-0304.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://advisories.mageia.org/MGASA-2014-0305.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://httpd.apache.org/security/vulnerabilities_24.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Mailing List\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143403519711434\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-1021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://seclists.org/fulldisclosure/2014/Jul/114\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/60536\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201408-12.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998\u0026r2=1610491\u0026diff_format=h\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989\u0026r2=1610491\u0026diff_format=h\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2014/dsa-2989\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.exploit-db.com/exploits/34133\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2014:142\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.osvdb.org/109216\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securityfocus.com/bid/68678\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://zerodayinitiative.com/advisories/ZDI-14-236/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1120603\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://puppet.com/security/cve/cve-2014-0226\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201504-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT204659\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.povonsec.com/apache-2-4-7-exploit/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]}]}}"
}
}
RHSA-2014_1021
Vulnerability from csaf_redhat - Published: 2014-08-06 14:52 - Updated: 2024-12-15 18:25Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update
Severity
Important
Notes
Topic: Updated packages that provide Red Hat JBoss Enterprise Application Platform
6.3.0 and fix multiple security issues, several bugs, and add various
enhancements are now available from the Red Hat Customer Portal.
The Red Hat Security Response Team has rated this update as having
Important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details: Red Hat JBoss Enterprise Application Platform 6 is a platform for Java
applications based on JBoss Application Server 7.
A race condition flaw, leading to heap-based buffer overflows, was found in
the mod_status httpd module. A remote attacker able to access a status page
served by mod_status on a server using a threaded Multi-Processing Module
(MPM) could send a specially crafted request that would cause the httpd
child process to crash or, possibly, allow the attacker to execute
arbitrary code with the privileges of the "apache" user. (CVE-2014-0226)
A denial of service flaw was found in the way httpd's mod_deflate module
handled request body decompression (configured via the "DEFLATE" input
filter). A remote attacker able to send a request whose body would be
decompressed could use this flaw to consume an excessive amount of system
memory and CPU on the target system. (CVE-2014-0118)
A denial of service flaw was found in the way OpenSSL handled certain DTLS
ServerHello requests. A specially crafted DTLS handshake packet could cause
a DTLS client using OpenSSL to crash. (CVE-2014-0221)
Note: This update provides a fix for the CVE-2014-0221 issue in openssl
packages for Solaris, HP-UX, and Microsoft Windows.
A denial of service flaw was found in the way httpd's mod_cgid module
executed CGI scripts that did not read data from the standard input.
A remote attacker could submit a specially crafted request that would cause
the httpd child process to hang indefinitely. (CVE-2014-0231)
A flaw was found in the WebSocket08FrameDecoder implementation that could
allow a remote attacker to trigger an Out Of Memory Exception by issuing a
series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on
the server configuration, this could lead to a denial of service.
(CVE-2014-0193)
It was found that the isCallerInRole() method of the SimpleSecurityManager
did not correctly check caller roles. A remote, authenticated attacker
could use this flaw to circumvent the caller check in applications that use
black list access control based on caller roles. (CVE-2014-3472)
Red Hat would like to thank the OpenSSL project for reporting
CVE-2014-0221; upstream acknowledges Imre Rad of Search-Lab as the original
reporter of this issue. Red Hat would also like to thank James Roper of
Typesafe for reporting CVE-2014-0193, and CA Technologies for reporting
CVE-2014-3472.
This release of JBoss Enterprise Application Platform also includes bug
fixes and enhancements. Documentation for these changes will be available
shortly from the JBoss Enterprise Application Platform 6.3.0 Release Notes,
linked to in the References.
All users of Red Hat JBoss Enterprise Application Platform 6.2 as provided
from the Red Hat Customer Portal are advised to apply this update.
The JBoss server process must be restarted for the update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A denial of service flaw was found in the way httpd's mod_deflate module handled request body decompression (configured via the "DEFLATE" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.
4.3 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service flaw was found in the way OpenSSL handled certain DTLS ServerHello requests. A specially crafted DTLS handshake packet could cause a DTLS client using OpenSSL to crash.
4.3 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the "apache" user.
6.8 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
4.3 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in the way httpd's mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that the fix for CVE-2013-2133 was incomplete: the JAX-WS handlers were being executed for outbound messages even when authorization had failed. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.
4.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.
2.1 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.3
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.3
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
References
47 references
Acknowledgments
Typesafe
James Roper
OpenSSL project
Search-Lab
Imre Rad
Red Hat Quality Engineering Team
Tomas Kyjovsky
CA Technologies
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.3.0 and fix multiple security issues, several bugs, and add various\nenhancements are now available from the Red Hat Customer Portal.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nA race condition flaw, leading to heap-based buffer overflows, was found in\nthe mod_status httpd module. A remote attacker able to access a status page\nserved by mod_status on a server using a threaded Multi-Processing Module\n(MPM) could send a specially crafted request that would cause the httpd\nchild process to crash or, possibly, allow the attacker to execute\narbitrary code with the privileges of the \"apache\" user. (CVE-2014-0226)\n\nA denial of service flaw was found in the way httpd\u0027s mod_deflate module\nhandled request body decompression (configured via the \"DEFLATE\" input\nfilter). A remote attacker able to send a request whose body would be\ndecompressed could use this flaw to consume an excessive amount of system\nmemory and CPU on the target system. (CVE-2014-0118)\n\nA denial of service flaw was found in the way OpenSSL handled certain DTLS\nServerHello requests. A specially crafted DTLS handshake packet could cause\na DTLS client using OpenSSL to crash. (CVE-2014-0221)\n\nNote: This update provides a fix for the CVE-2014-0221 issue in openssl\npackages for Solaris, HP-UX, and Microsoft Windows.\n\nA denial of service flaw was found in the way httpd\u0027s mod_cgid module\nexecuted CGI scripts that did not read data from the standard input.\nA remote attacker could submit a specially crafted request that would cause\nthe httpd child process to hang indefinitely. (CVE-2014-0231)\n\nA flaw was found in the WebSocket08FrameDecoder implementation that could\nallow a remote attacker to trigger an Out Of Memory Exception by issuing a\nseries of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on\nthe server configuration, this could lead to a denial of service.\n(CVE-2014-0193)\n\nIt was found that the isCallerInRole() method of the SimpleSecurityManager\ndid not correctly check caller roles. A remote, authenticated attacker\ncould use this flaw to circumvent the caller check in applications that use\nblack list access control based on caller roles. (CVE-2014-3472)\n\nRed Hat would like to thank the OpenSSL project for reporting\nCVE-2014-0221; upstream acknowledges Imre Rad of Search-Lab as the original\nreporter of this issue. Red Hat would also like to thank James Roper of\nTypesafe for reporting CVE-2014-0193, and CA Technologies for reporting\nCVE-2014-3472.\n\nThis release of JBoss Enterprise Application Platform also includes bug\nfixes and enhancements. Documentation for these changes will be available\nshortly from the JBoss Enterprise Application Platform 6.3.0 Release Notes,\nlinked to in the References.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.2 as provided\nfrom the Red Hat Customer Portal are advised to apply this update.\nThe JBoss server process must be restarted for the update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1021",
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=distributions\u0026version=6.3",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=distributions\u0026version=6.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.3/html/6.3.0_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.3/html/6.3.0_Release_Notes/index.html"
},
{
"category": "external",
"summary": "1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "1103593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593"
},
{
"category": "external",
"summary": "1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1021.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 update",
"tracking": {
"current_release_date": "2024-12-15T18:25:16+00:00",
"generator": {
"date": "2024-12-15T18:25:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2014:1021",
"initial_release_date": "2014-08-06T14:52:25+00:00",
"revision_history": [
{
"date": "2014-08-06T14:52:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-08-06T14:52:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:25:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.3"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-0118",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120601"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_deflate module handled request body decompression (configured via the \"DEFLATE\" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_deflate denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0118"
},
{
"category": "external",
"summary": "RHBZ#1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0118",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_deflate denial of service"
},
{
"acknowledgments": [
{
"names": [
"James Roper"
],
"organization": "Typesafe"
}
],
"cve": "CVE-2014-0193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1092783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the WebSocket08FrameDecoder implementation that could allow a remote attacker to trigger an Out Of Memory Exception by issuing a series of TextWebSocketFrame and ContinuationWebSocketFrames. Depending on the server configuration, this could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: DoS via memory exhaustion during data aggregation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0193"
},
{
"category": "external",
"summary": "RHBZ#1092783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1092783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0193"
}
],
"release_date": "2014-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "netty: DoS via memory exhaustion during data aggregation"
},
{
"acknowledgments": [
{
"names": [
"OpenSSL project"
]
},
{
"names": [
"Imre Rad"
],
"organization": "Search-Lab",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2014-0221",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way OpenSSL handled certain DTLS ServerHello requests. A specially crafted DTLS handshake packet could cause a DTLS client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: DoS when sending invalid DTLS handshake",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0221"
},
{
"category": "external",
"summary": "RHBZ#1103593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0221",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0221"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv_20140605.txt",
"url": "https://www.openssl.org/news/secadv_20140605.txt"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: DoS when sending invalid DTLS handshake"
},
{
"cve": "CVE-2014-0226",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120603"
}
],
"notes": [
{
"category": "description",
"text": "A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the \"apache\" user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_status heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0226"
},
{
"category": "external",
"summary": "RHBZ#1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: mod_status heap-based buffer overflow"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0231",
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120596"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_cgid denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0231"
},
{
"category": "external",
"summary": "RHBZ#1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0231",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_cgid denial of service"
},
{
"acknowledgments": [
{
"names": [
"Tomas Kyjovsky"
],
"organization": "Red Hat Quality Engineering Team",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2014-3464",
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102317"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the fix for CVE-2013-2133 was incomplete: the JAX-WS handlers were being executed for outbound messages even when authorization had failed. A remote attacker who is authorized to access the EJB class, could invoke a JAX-WS handler which they were not authorized to invoke.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "WS: Incomplete fix for CVE-2013-2133",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3464"
},
{
"category": "external",
"summary": "RHBZ#1102317",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102317"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3464",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3464"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3464",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3464"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "WS: Incomplete fix for CVE-2013-2133"
},
{
"acknowledgments": [
{
"names": [
"CA Technologies"
]
}
],
"cve": "CVE-2014-3472",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2014-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103815"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the isCallerInRole() method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Security: Invalid EJB caller role check implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3472"
},
{
"category": "external",
"summary": "RHBZ#1103815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3472",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3472"
}
],
"release_date": "2014-08-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-06T14:52:25+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying this update, back up your\nexisting Red Hat JBoss Enterprise Application Platform installation and\ndeployed applications.",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.3"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1021"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.3"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Security: Invalid EJB caller role check implementation"
}
]
}
RHSA-2014_1086
Vulnerability from csaf_redhat - Published: 2014-08-21 15:30 - Updated: 2024-12-15 18:24Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update
Severity
Important
Notes
Topic: Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and
several bugs, is now available from the Red Hat Customer Portal for Red Hat
Enterprise Linux 5 and 6, Solaris, and Microsoft Windows.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details: Red Hat JBoss Web Server is a fully integrated and certified set of
components for hosting Java web applications. It is comprised of the Apache
HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector
(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat
Native library.
This release serves as a replacement for Red Hat JBoss Web Server 2.0.1,
and includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0
Release Notes, linked to in the References section, for information on the
most significant of these changes.
The following security issues are also fixed with this release:
A race condition flaw, leading to heap-based buffer overflows, was found in
the mod_status httpd module. A remote attacker able to access a status page
served by mod_status on a server using a threaded Multi-Processing Module
(MPM) could send a specially crafted request that would cause the httpd
child process to crash or, possibly, allow the attacker to execute
arbitrary code with the privileges of the "apache" user. (CVE-2014-0226)
A denial of service flaw was found in the way httpd's mod_deflate module
handled request body decompression (configured via the "DEFLATE" input
filter). A remote attacker able to send a request whose body would be
decompressed could use this flaw to consume an excessive amount of system
memory and CPU on the target system. (CVE-2014-0118)
A denial of service flaw was found in the way OpenSSL handled certain DTLS
ServerHello requests. A specially crafted DTLS handshake packet could cause
a DTLS client using OpenSSL to crash. (CVE-2014-0221)
Note: This update provides a fix for the CVE-2014-0221 issue in openssl
packages for Solaris and Microsoft Windows.
A denial of service flaw was found in the way httpd's mod_cgid module
executed CGI scripts that did not read data from the standard input.
A remote attacker could submit a specially crafted request that would cause
the httpd child process to hang indefinitely. (CVE-2014-0231)
It was found that several application-provided XML files, such as web.xml,
content.xml, *.tld, *.tagx, and *.jspx, resolved external entities,
permitting XML External Entity (XXE) attacks. An attacker able to deploy
malicious applications to Tomcat could use this flaw to circumvent security
restrictions set by the JSM, and gain access to sensitive information on
the system. Note that this flaw only affected deployments in which Tomcat
is running applications from untrusted sources, such as in a shared hosting
environment. (CVE-2013-4590)
It was found that, in certain circumstances, it was possible for a
malicious web application to replace the XML parsers used by Tomcat to
process XSLTs for the default servlet, JSP documents, tag library
descriptors (TLDs), and tag plug-in configuration files. The injected XML
parser(s) could then bypass the limits imposed on XML external entities
and/or gain access to the XML files processed for other web applications
deployed on the same Tomcat instance. (CVE-2014-0119)
Red Hat would like to thank the OpenSSL project for reporting
CVE-2014-0221. Upstream acknowledges Imre Rad of Search-Lab as the original
reporter of this issue.
All users of Red Hat JBoss Web Server 2.0.1 as provided from the Red Hat
Customer Portal are advised to upgrade to Red Hat JBoss Web Server 2.1.0.
The JBoss server process must be restarted for this update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.
1.2 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service flaw was found in the way httpd's mod_deflate module handled request body decompression (configured via the "DEFLATE" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.
2.1 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service flaw was found in the way OpenSSL handled certain DTLS ServerHello requests. A specially crafted DTLS handshake packet could cause a DTLS client using OpenSSL to crash.
4.3 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the "apache" user.
6.8 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
4.3 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in the way httpd's mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.
5.0 ()
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Web Server 2.1
Red Hat / Red Hat JBoss Web Server
|
cpe:/a:redhat:jboss_enterprise_web_server:2.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
43 references
Acknowledgments
OpenSSL project
Search-Lab
Imre Rad
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and\nseveral bugs, is now available from the Red Hat Customer Portal for Red Hat\nEnterprise Linux 5 and 6, Solaris, and Microsoft Windows.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Web Server is a fully integrated and certified set of\ncomponents for hosting Java web applications. It is comprised of the Apache\nHTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector\n(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat\nNative library.\n\nThis release serves as a replacement for Red Hat JBoss Web Server 2.0.1,\nand includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0\nRelease Notes, linked to in the References section, for information on the\nmost significant of these changes.\n\nThe following security issues are also fixed with this release:\n\nA race condition flaw, leading to heap-based buffer overflows, was found in\nthe mod_status httpd module. A remote attacker able to access a status page\nserved by mod_status on a server using a threaded Multi-Processing Module\n(MPM) could send a specially crafted request that would cause the httpd\nchild process to crash or, possibly, allow the attacker to execute\narbitrary code with the privileges of the \"apache\" user. (CVE-2014-0226)\n\nA denial of service flaw was found in the way httpd\u0027s mod_deflate module\nhandled request body decompression (configured via the \"DEFLATE\" input\nfilter). A remote attacker able to send a request whose body would be\ndecompressed could use this flaw to consume an excessive amount of system\nmemory and CPU on the target system. (CVE-2014-0118)\n\nA denial of service flaw was found in the way OpenSSL handled certain DTLS\nServerHello requests. A specially crafted DTLS handshake packet could cause\na DTLS client using OpenSSL to crash. (CVE-2014-0221)\n\nNote: This update provides a fix for the CVE-2014-0221 issue in openssl\npackages for Solaris and Microsoft Windows.\n\nA denial of service flaw was found in the way httpd\u0027s mod_cgid module\nexecuted CGI scripts that did not read data from the standard input.\nA remote attacker could submit a specially crafted request that would cause\nthe httpd child process to hang indefinitely. (CVE-2014-0231)\n\nIt was found that several application-provided XML files, such as web.xml,\ncontent.xml, *.tld, *.tagx, and *.jspx, resolved external entities,\npermitting XML External Entity (XXE) attacks. An attacker able to deploy\nmalicious applications to Tomcat could use this flaw to circumvent security\nrestrictions set by the JSM, and gain access to sensitive information on\nthe system. Note that this flaw only affected deployments in which Tomcat\nis running applications from untrusted sources, such as in a shared hosting\nenvironment. (CVE-2013-4590)\n\nIt was found that, in certain circumstances, it was possible for a\nmalicious web application to replace the XML parsers used by Tomcat to\nprocess XSLTs for the default servlet, JSP documents, tag library\ndescriptors (TLDs), and tag plug-in configuration files. The injected XML\nparser(s) could then bypass the limits imposed on XML external entities\nand/or gain access to the XML files processed for other web applications\ndeployed on the same Tomcat instance. (CVE-2014-0119)\n\nRed Hat would like to thank the OpenSSL project for reporting\nCVE-2014-0221. Upstream acknowledges Imre Rad of Search-Lab as the original\nreporter of this issue.\n\nAll users of Red Hat JBoss Web Server 2.0.1 as provided from the Red Hat\nCustomer Portal are advised to upgrade to Red Hat JBoss Web Server 2.1.0.\nThe JBoss server process must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1086",
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=webserver\u0026version=2.1.0",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=webserver\u0026version=2.1.0"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html"
},
{
"category": "external",
"summary": "1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1103593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593"
},
{
"category": "external",
"summary": "1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1086.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update",
"tracking": {
"current_release_date": "2024-12-15T18:24:59+00:00",
"generator": {
"date": "2024-12-15T18:24:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2014:1086",
"initial_release_date": "2014-08-21T15:30:27+00:00",
"revision_history": [
{
"date": "2014-08-21T15:30:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-08-21T15:30:27+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:24:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 2.1",
"product": {
"name": "Red Hat JBoss Web Server 2.1",
"product_id": "Red Hat JBoss Web Server 2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:2.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4590",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1069911"
}
],
"notes": [
{
"category": "description",
"text": "It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: information disclosure via XXE when running untrusted web applications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect JBoss Web, as shipped with various Red Hat JBoss products.\n\nThis issue does affect Tomcat 5 as shipped by Red Hat Enterprise Linux 5. The risks in breaking compatibility associated with fixing this flaw outweigh the benefits of the fix, therefore Red Hat does not plan to fix this flaw in Red Hat Enterprise Linux 5. Additionally, note that Red Hat Enterprise Linux 5 is currently in reduced support phase, receiving only Critical security updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/site/support/policy/updates/errata#Production_3_Phase",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4590"
},
{
"category": "external",
"summary": "RHBZ#1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4590",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590"
}
],
"release_date": "2014-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: information disclosure via XXE when running untrusted web applications"
},
{
"cve": "CVE-2014-0118",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120601"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_deflate module handled request body decompression (configured via the \"DEFLATE\" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_deflate denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0118"
},
{
"category": "external",
"summary": "RHBZ#1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0118",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_deflate denial of service"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"acknowledgments": [
{
"names": [
"OpenSSL project"
]
},
{
"names": [
"Imre Rad"
],
"organization": "Search-Lab",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2014-0221",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1103593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way OpenSSL handled certain DTLS ServerHello requests. A specially crafted DTLS handshake packet could cause a DTLS client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: DoS when sending invalid DTLS handshake",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0221"
},
{
"category": "external",
"summary": "RHBZ#1103593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0221",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0221"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv_20140605.txt",
"url": "https://www.openssl.org/news/secadv_20140605.txt"
}
],
"release_date": "2014-06-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: DoS when sending invalid DTLS handshake"
},
{
"cve": "CVE-2014-0226",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120603"
}
],
"notes": [
{
"category": "description",
"text": "A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the \"apache\" user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_status heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0226"
},
{
"category": "external",
"summary": "RHBZ#1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: mod_status heap-based buffer overflow"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0231",
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120596"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_cgid denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Web Server 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0231"
},
{
"category": "external",
"summary": "RHBZ#1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0231",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:30:27+00:00",
"details": "The References section of this erratum contains a download link (you must\nlog in to download the update). Before applying the update, back up your\nexisting Red Hat JBoss Web Server installation (including all applications\nand configuration files).",
"product_ids": [
"Red Hat JBoss Web Server 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1086"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"Red Hat JBoss Web Server 2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_cgid denial of service"
}
]
}
RHSA-2014_1087
Vulnerability from csaf_redhat - Published: 2014-08-21 15:29 - Updated: 2024-12-15 18:25Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update
Severity
Important
Notes
Topic: Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and
several bugs, is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details: Red Hat JBoss Web Server is a fully integrated and certified set of
components for hosting Java web applications. It is comprised of the Apache
HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector
(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat
Native library.
This release serves as a replacement for Red Hat JBoss Web Server 2.0.1,
and includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0
Release Notes, linked to in the References section, for information on the
most significant of these changes.
The following security issues are also fixed with this release:
A race condition flaw, leading to heap-based buffer overflows, was found in
the mod_status httpd module. A remote attacker able to access a status page
served by mod_status on a server using a threaded Multi-Processing Module
(MPM) could send a specially crafted request that would cause the httpd
child process to crash or, possibly, allow the attacker to execute
arbitrary code with the privileges of the "apache" user. (CVE-2014-0226)
A denial of service flaw was found in the way httpd's mod_deflate module
handled request body decompression (configured via the "DEFLATE" input
filter). A remote attacker able to send a request whose body would be
decompressed could use this flaw to consume an excessive amount of system
memory and CPU on the target system. (CVE-2014-0118)
A denial of service flaw was found in the way httpd's mod_cgid module
executed CGI scripts that did not read data from the standard input.
A remote attacker could submit a specially crafted request that would cause
the httpd child process to hang indefinitely. (CVE-2014-0231)
It was found that several application-provided XML files, such as web.xml,
content.xml, *.tld, *.tagx, and *.jspx, resolved external entities,
permitting XML External Entity (XXE) attacks. An attacker able to deploy
malicious applications to Tomcat could use this flaw to circumvent security
restrictions set by the JSM, and gain access to sensitive information on
the system. Note that this flaw only affected deployments in which Tomcat
is running applications from untrusted sources, such as in a shared hosting
environment. (CVE-2013-4590)
It was found that, in certain circumstances, it was possible for a
malicious web application to replace the XML parsers used by Tomcat to
process XSLTs for the default servlet, JSP documents, tag library
descriptors (TLDs), and tag plug-in configuration files. The injected XML
parser(s) could then bypass the limits imposed on XML external entities
and/or gain access to the XML files processed for other web applications
deployed on the same Tomcat instance. (CVE-2014-0119)
All users of Red Hat JBoss Web Server 2.0.1 on Red Hat Enterprise Linux 6
are advised to upgrade to Red Hat JBoss Web Server 2.1.0. The JBoss server
process must be restarted for this update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.
1.2 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service flaw was found in the way httpd's mod_deflate module handled request body decompression (configured via the "DEFLATE" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.
5.0 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.
2.1 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the "apache" user.
6.8 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
4.3 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in the way httpd's mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.
5.0 ()
Affected products
Fixed
105 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and\nseveral bugs, is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Web Server is a fully integrated and certified set of\ncomponents for hosting Java web applications. It is comprised of the Apache\nHTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector\n(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat\nNative library.\n\nThis release serves as a replacement for Red Hat JBoss Web Server 2.0.1,\nand includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0\nRelease Notes, linked to in the References section, for information on the\nmost significant of these changes.\n\nThe following security issues are also fixed with this release:\n\nA race condition flaw, leading to heap-based buffer overflows, was found in\nthe mod_status httpd module. A remote attacker able to access a status page\nserved by mod_status on a server using a threaded Multi-Processing Module\n(MPM) could send a specially crafted request that would cause the httpd\nchild process to crash or, possibly, allow the attacker to execute\narbitrary code with the privileges of the \"apache\" user. (CVE-2014-0226)\n\nA denial of service flaw was found in the way httpd\u0027s mod_deflate module\nhandled request body decompression (configured via the \"DEFLATE\" input\nfilter). A remote attacker able to send a request whose body would be\ndecompressed could use this flaw to consume an excessive amount of system\nmemory and CPU on the target system. (CVE-2014-0118)\n\nA denial of service flaw was found in the way httpd\u0027s mod_cgid module\nexecuted CGI scripts that did not read data from the standard input.\nA remote attacker could submit a specially crafted request that would cause\nthe httpd child process to hang indefinitely. (CVE-2014-0231)\n\nIt was found that several application-provided XML files, such as web.xml,\ncontent.xml, *.tld, *.tagx, and *.jspx, resolved external entities,\npermitting XML External Entity (XXE) attacks. An attacker able to deploy\nmalicious applications to Tomcat could use this flaw to circumvent security\nrestrictions set by the JSM, and gain access to sensitive information on\nthe system. Note that this flaw only affected deployments in which Tomcat\nis running applications from untrusted sources, such as in a shared hosting\nenvironment. (CVE-2013-4590)\n\nIt was found that, in certain circumstances, it was possible for a\nmalicious web application to replace the XML parsers used by Tomcat to\nprocess XSLTs for the default servlet, JSP documents, tag library\ndescriptors (TLDs), and tag plug-in configuration files. The injected XML\nparser(s) could then bypass the limits imposed on XML external entities\nand/or gain access to the XML files processed for other web applications\ndeployed on the same Tomcat instance. (CVE-2014-0119)\n\nAll users of Red Hat JBoss Web Server 2.0.1 on Red Hat Enterprise Linux 6\nare advised to upgrade to Red Hat JBoss Web Server 2.1.0. The JBoss server\nprocess must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1087",
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html"
},
{
"category": "external",
"summary": "1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1087.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update",
"tracking": {
"current_release_date": "2024-12-15T18:25:04+00:00",
"generator": {
"date": "2024-12-15T18:25:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2014:1087",
"initial_release_date": "2014-08-21T15:29:44+00:00",
"revision_history": [
{
"date": "2014-08-21T15:29:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-08-21T15:29:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:25:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:2::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product": {
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product_id": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-tomcat-eap6@1.6-7.redhat_6.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product_id": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-eap6@1.6-7.redhat_6.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"product": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"product_id": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-eap6@1.0.15-5.redhat_1.ep6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"product": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"product_id": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-17.redhat_4.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"product_id": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist-eap6@3.18.1-1.GA_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product": {
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product_id": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-tomcat-eap6@3.2.1-15.redhat_3.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product_id": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-eap6@3.2.1-15.redhat_3.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"product_id": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-logging@3.1.4-1.GA_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"product": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"product_id": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dom4j-eap6@1.6.1-20.redhat_6.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"product": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"product_id": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ecj3@3.7.2-9.redhat_3.1.ep6.el6?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_id": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-tomcat6@1.2.9-1.Final_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_id": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-tomcat7@1.2.9-1.Final_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_id": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster@1.2.9-1.Final_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"product": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"product_id": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc7@0.0.1-7.Alpha3_redhat_12.5.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product": {
"name": "apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product_id": "apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-logging-tomcat-eap6@1.1.1-7.9_redhat_1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product": {
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product_id": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-logging-eap6@1.1.1-7.9_redhat_1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"product": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"product_id": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc6@0.0.1-7.Alpha3_redhat_12.3.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-servlet-3.0-api@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-lib@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-log4j@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-admin-webapps@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-docs-webapp@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-jsp-2.2-api@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-webapps@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-javadoc@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_id": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-el-2.2-api@7.0.54-6_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-log4j@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_id": "tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.41-5_patch_02.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-c3p0-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product": {
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_id": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"product": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"product_id": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-transaction-api_1.1_spec@1.0.1-12.Final_redhat_2.2.ep6.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"product": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"product_id": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-eap6@1.6-7.redhat_6.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"product": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"product_id": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-eap6@1.0.15-5.redhat_1.ep6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"product": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"product_id": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-17.redhat_4.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"product": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"product_id": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist-eap6@3.18.1-1.GA_redhat_1.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"product": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"product_id": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-eap6@3.2.1-15.redhat_3.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"product": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"product_id": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-logging@3.1.4-1.GA_redhat_1.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"product": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"product_id": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dom4j-eap6@1.6.1-20.redhat_6.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"product": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"product_id": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ecj3@3.7.2-9.redhat_3.1.ep6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"product": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"product_id": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster@1.2.9-1.Final_redhat_1.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"product": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"product_id": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc7@0.0.1-7.Alpha3_redhat_12.5.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"product": {
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"product_id": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-logging-eap6@1.1.1-7.9_redhat_1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"product": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"product_id": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc6@0.0.1-7.Alpha3_redhat_12.3.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el6.src",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el6.src",
"product_id": "httpd-0:2.2.26-35.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"product": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"product_id": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7@7.0.54-6_patch_02.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"product": {
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"product_id": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.41-5_patch_02.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"product": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"product_id": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"product": {
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"product_id": "mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk@1.2.40-2.redhat_1.ep6.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"product": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"product_id": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-transaction-api_1.1_spec@1.0.1-12.Final_redhat_2.2.ep6.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"product_id": "mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.2.26-35.ep6.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"product_id": "httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.2.26-35.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"product_id": "httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.2.26-35.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"product_id": "httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.2.26-35.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"product_id": "httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.2.26-35.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el6.x86_64",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el6.x86_64",
"product_id": "httpd-0:2.2.26-35.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"product": {
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"product_id": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt-debuginfo@2.4.1-6.GA.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"product": {
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"product_id": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp-debuginfo@2.4.1-13.GA.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product": {
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product_id": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native-debuginfo@1.2.9-3.Final_redhat_2.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product": {
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product_id": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native-debuginfo@1.1.30-2.redhat_1.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_id": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-manual@1.2.40-2.redhat_1.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_id": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-ap22@1.2.40-2.redhat_1.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product": {
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_id": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-debuginfo@1.2.40-2.redhat_1.ep6.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product_id": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6-debuginfo@1.0.15-6.redhat_2.ep6.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.2.26-35.ep6.el6.i386",
"product": {
"name": "mod_ssl-1:2.2.26-35.ep6.el6.i386",
"product_id": "mod_ssl-1:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.2.26-35.ep6.el6?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.2.26-35.ep6.el6.i386",
"product": {
"name": "httpd-devel-0:2.2.26-35.ep6.el6.i386",
"product_id": "httpd-devel-0:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.2.26-35.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.2.26-35.ep6.el6.i386",
"product": {
"name": "httpd-tools-0:2.2.26-35.ep6.el6.i386",
"product_id": "httpd-tools-0:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.2.26-35.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"product": {
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"product_id": "httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.2.26-35.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.2.26-35.ep6.el6.i386",
"product": {
"name": "httpd-manual-0:2.2.26-35.ep6.el6.i386",
"product_id": "httpd-manual-0:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.2.26-35.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el6.i386",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el6.i386",
"product_id": "httpd-0:2.2.26-35.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"product": {
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"product_id": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt-debuginfo@2.4.1-6.GA.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"product": {
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"product_id": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp-debuginfo@2.4.1-13.GA.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product": {
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product_id": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native-debuginfo@1.2.9-3.Final_redhat_2.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product": {
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product_id": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native-debuginfo@1.1.30-2.redhat_1.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_id": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-manual@1.2.40-2.redhat_1.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_id": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-ap22@1.2.40-2.redhat_1.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product": {
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_id": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-debuginfo@1.2.40-2.redhat_1.ep6.el6?arch=i386"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product_id": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6-debuginfo@1.0.15-6.redhat_2.ep6.el6?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el6?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch"
},
"product_reference": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src"
},
"product_reference": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch"
},
"product_reference": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src"
},
"product_reference": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch"
},
"product_reference": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch"
},
"product_reference": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src"
},
"product_reference": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch"
},
"product_reference": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src"
},
"product_reference": "apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch"
},
"product_reference": "apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch"
},
"product_reference": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src"
},
"product_reference": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch"
},
"product_reference": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch"
},
"product_reference": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src"
},
"product_reference": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch"
},
"product_reference": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src"
},
"product_reference": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src"
},
"product_reference": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386"
},
"product_reference": "httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386"
},
"product_reference": "httpd-devel-0:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386"
},
"product_reference": "httpd-manual-0:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386"
},
"product_reference": "httpd-tools-0:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src"
},
"product_reference": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src"
},
"product_reference": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch"
},
"product_reference": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src"
},
"product_reference": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src"
},
"product_reference": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386"
},
"product_reference": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64"
},
"product_reference": "mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch"
},
"product_reference": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src"
},
"product_reference": "mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386"
},
"product_reference": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64"
},
"product_reference": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386"
},
"product_reference": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64"
},
"product_reference": "mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386"
},
"product_reference": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64"
},
"product_reference": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386"
},
"product_reference": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64"
},
"product_reference": "mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386"
},
"product_reference": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64"
},
"product_reference": "mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.2.26-35.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386"
},
"product_reference": "mod_ssl-1:2.2.26-35.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.2.26-35.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64"
},
"product_reference": "mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch"
},
"product_reference": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src"
},
"product_reference": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch"
},
"product_reference": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src"
},
"product_reference": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386"
},
"product_reference": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64"
},
"product_reference": "tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src"
},
"product_reference": "tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src"
},
"product_reference": "tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server",
"product_id": "6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
},
"product_reference": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"relates_to_product_reference": "6Server-JBEWS-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4590",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1069911"
}
],
"notes": [
{
"category": "description",
"text": "It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: information disclosure via XXE when running untrusted web applications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect JBoss Web, as shipped with various Red Hat JBoss products.\n\nThis issue does affect Tomcat 5 as shipped by Red Hat Enterprise Linux 5. The risks in breaking compatibility associated with fixing this flaw outweigh the benefits of the fix, therefore Red Hat does not plan to fix this flaw in Red Hat Enterprise Linux 5. Additionally, note that Red Hat Enterprise Linux 5 is currently in reduced support phase, receiving only Critical security updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/site/support/policy/updates/errata#Production_3_Phase",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4590"
},
{
"category": "external",
"summary": "RHBZ#1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4590",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590"
}
],
"release_date": "2014-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: information disclosure via XXE when running untrusted web applications"
},
{
"cve": "CVE-2014-0118",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120601"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_deflate module handled request body decompression (configured via the \"DEFLATE\" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_deflate denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0118"
},
{
"category": "external",
"summary": "RHBZ#1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0118",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_deflate denial of service"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"cve": "CVE-2014-0226",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120603"
}
],
"notes": [
{
"category": "description",
"text": "A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the \"apache\" user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_status heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0226"
},
{
"category": "external",
"summary": "RHBZ#1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: mod_status heap-based buffer overflow"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0231",
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120596"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_cgid denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0231"
},
{
"category": "external",
"summary": "RHBZ#1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0231",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:44+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1087"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.noarch",
"6Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-debuginfo-1:1.0.15-6.redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-logging-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-logging-tomcat-eap6-0:1.1.1-7.9_redhat_1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.noarch",
"6Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el6.src",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.noarch",
"6Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.src",
"6Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-debuginfo-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.noarch",
"6Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.src",
"6Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.i386",
"6Server-JBEWS-2:mod_cluster-native-debuginfo-0:1.2.9-3.Final_redhat_2.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el6.noarch",
"6Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-debuginfo-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_rt-debuginfo-0:2.4.1-6.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.src",
"6Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.i386",
"6Server-JBEWS-2:mod_snmp-debuginfo-0:2.4.1-13.GA.ep6.el6.x86_64",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.i386",
"6Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el6.x86_64",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el6.src",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.noarch",
"6Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.src",
"6Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.i386",
"6Server-JBEWS-2:tomcat-native-debuginfo-0:1.1.30-2.redhat_1.ep6.el6.x86_64",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-0:6.0.41-5_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-lib-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-log4j-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat6-webapps-0:6.0.41-5_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el6.src",
"6Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el6.noarch",
"6Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_cgid denial of service"
}
]
}
RHSA-2014_1088
Vulnerability from csaf_redhat - Published: 2014-08-21 15:29 - Updated: 2024-12-15 18:25Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update
Severity
Important
Notes
Topic: Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and
several bugs, is now available for Red Hat Enterprise Linux 5.
Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details: Red Hat JBoss Web Server is a fully integrated and certified set of
components for hosting Java web applications. It is comprised of the Apache
HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector
(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat
Native library.
This release serves as a replacement for Red Hat JBoss Web Server 2.0.1,
and includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0
Release Notes, linked to in the References section, for information on the
most significant of these changes.
The following security issues are also fixed with this release:
A race condition flaw, leading to heap-based buffer overflows, was found in
the mod_status httpd module. A remote attacker able to access a status page
served by mod_status on a server using a threaded Multi-Processing Module
(MPM) could send a specially crafted request that would cause the httpd
child process to crash or, possibly, allow the attacker to execute
arbitrary code with the privileges of the "apache" user. (CVE-2014-0226)
A denial of service flaw was found in the way httpd's mod_deflate module
handled request body decompression (configured via the "DEFLATE" input
filter). A remote attacker able to send a request whose body would be
decompressed could use this flaw to consume an excessive amount of system
memory and CPU on the target system. (CVE-2014-0118)
A denial of service flaw was found in the way httpd's mod_cgid module
executed CGI scripts that did not read data from the standard input.
A remote attacker could submit a specially crafted request that would cause
the httpd child process to hang indefinitely. (CVE-2014-0231)
It was found that several application-provided XML files, such as web.xml,
content.xml, *.tld, *.tagx, and *.jspx, resolved external entities,
permitting XML External Entity (XXE) attacks. An attacker able to deploy
malicious applications to Tomcat could use this flaw to circumvent security
restrictions set by the JSM, and gain access to sensitive information on
the system. Note that this flaw only affected deployments in which Tomcat
is running applications from untrusted sources, such as in a shared hosting
environment. (CVE-2013-4590)
It was found that, in certain circumstances, it was possible for a
malicious web application to replace the XML parsers used by Tomcat to
process XSLTs for the default servlet, JSP documents, tag library
descriptors (TLDs), and tag plug-in configuration files. The injected XML
parser(s) could then bypass the limits imposed on XML external entities
and/or gain access to the XML files processed for other web applications
deployed on the same Tomcat instance. (CVE-2014-0119)
All users of Red Hat JBoss Web Server 2.0.1 on Red Hat Enterprise Linux 5
are advised to upgrade to Red Hat JBoss Web Server 2.1.0. The JBoss server
process must be restarted for this update to take effect.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.
1.2 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service flaw was found in the way httpd's mod_deflate module handled request body decompression (configured via the "DEFLATE" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.
5.0 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.
2.1 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Low
A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the "apache" user.
6.8 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.
4.3 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in the way httpd's mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.
5.0 ()
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Web Server 2.1.0, which fixes multiple security issues and\nseveral bugs, is now available for Red Hat Enterprise Linux 5.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Web Server is a fully integrated and certified set of\ncomponents for hosting Java web applications. It is comprised of the Apache\nHTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector\n(mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat\nNative library.\n\nThis release serves as a replacement for Red Hat JBoss Web Server 2.0.1,\nand includes several bug fixes. Refer to the Red Hat JBoss Web Server 2.1.0\nRelease Notes, linked to in the References section, for information on the\nmost significant of these changes.\n\nThe following security issues are also fixed with this release:\n\nA race condition flaw, leading to heap-based buffer overflows, was found in\nthe mod_status httpd module. A remote attacker able to access a status page\nserved by mod_status on a server using a threaded Multi-Processing Module\n(MPM) could send a specially crafted request that would cause the httpd\nchild process to crash or, possibly, allow the attacker to execute\narbitrary code with the privileges of the \"apache\" user. (CVE-2014-0226)\n\nA denial of service flaw was found in the way httpd\u0027s mod_deflate module\nhandled request body decompression (configured via the \"DEFLATE\" input\nfilter). A remote attacker able to send a request whose body would be\ndecompressed could use this flaw to consume an excessive amount of system\nmemory and CPU on the target system. (CVE-2014-0118)\n\nA denial of service flaw was found in the way httpd\u0027s mod_cgid module\nexecuted CGI scripts that did not read data from the standard input.\nA remote attacker could submit a specially crafted request that would cause\nthe httpd child process to hang indefinitely. (CVE-2014-0231)\n\nIt was found that several application-provided XML files, such as web.xml,\ncontent.xml, *.tld, *.tagx, and *.jspx, resolved external entities,\npermitting XML External Entity (XXE) attacks. An attacker able to deploy\nmalicious applications to Tomcat could use this flaw to circumvent security\nrestrictions set by the JSM, and gain access to sensitive information on\nthe system. Note that this flaw only affected deployments in which Tomcat\nis running applications from untrusted sources, such as in a shared hosting\nenvironment. (CVE-2013-4590)\n\nIt was found that, in certain circumstances, it was possible for a\nmalicious web application to replace the XML parsers used by Tomcat to\nprocess XSLTs for the default servlet, JSP documents, tag library\ndescriptors (TLDs), and tag plug-in configuration files. The injected XML\nparser(s) could then bypass the limits imposed on XML external entities\nand/or gain access to the XML files processed for other web applications\ndeployed on the same Tomcat instance. (CVE-2014-0119)\n\nAll users of Red Hat JBoss Web Server 2.0.1 on Red Hat Enterprise Linux 5\nare advised to upgrade to Red Hat JBoss Web Server 2.1.0. The JBoss server\nprocess must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1088",
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Web_Server/2.1/html/2.1.0_Release_Notes/index.html"
},
{
"category": "external",
"summary": "1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1088.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 update",
"tracking": {
"current_release_date": "2024-12-15T18:25:10+00:00",
"generator": {
"date": "2024-12-15T18:25:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2014:1088",
"initial_release_date": "2014-08-21T15:29:13+00:00",
"revision_history": [
{
"date": "2014-08-21T15:29:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-08-21T15:29:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:25:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product": {
"name": "Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:2::el5"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product": {
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product_id": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-tomcat-eap6@1.6-7.redhat_6.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product_id": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-eap6@1.6-7.redhat_6.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"product": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"product_id": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-eap6@1.0.15-5.redhat_1.ep6.el5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"product": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"product_id": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-17.redhat_4.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product": {
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product_id": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-tomcat-eap6@3.2.1-15.redhat_3.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product_id": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-eap6@3.2.1-15.redhat_3.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"product_id": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist-eap6@3.18.1-1.GA_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"product_id": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-logging@3.1.4-1.GA_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"product": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"product_id": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dom4j-eap6@1.6.1-20.redhat_6.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"product": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"product_id": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ecj3@3.7.2-9.redhat_3.1.ep6.el5?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_id": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-tomcat6@1.2.9-1.Final_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_id": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-tomcat7@1.2.9-1.Final_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_id": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster@1.2.9-1.Final_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"product": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"product_id": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc7@0.0.1-7.Alpha3_redhat_12.5.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-servlet-3.0-api@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-lib@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-log4j@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-admin-webapps@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-docs-webapp@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-jsp-2.2-api@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-webapps@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-javadoc@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7-el-2.2-api@7.0.54-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-lib@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-javadoc@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-log4j@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product": {
"name": "tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_id": "tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.41-6_patch_02.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-c3p0-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product": {
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_id": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"product": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"product_id": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc6@0.0.1-7.Alpha3_redhat_12.3.ep6.el5?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"product": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"product_id": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-transaction-api_1.1_spec@1.0.1-12.Final_redhat_2.2.ep6.el5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"product": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"product_id": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-pool-eap6@1.6-7.redhat_6.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"product": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"product_id": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-eap6@1.0.15-5.redhat_1.ep6.el5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"product": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"product_id": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/antlr-eap6@2.7.7-17.redhat_4.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"product": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"product_id": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-collections-eap6@3.2.1-15.redhat_3.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"product": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"product_id": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/javassist-eap6@3.18.1-1.GA_redhat_1.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"product": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"product_id": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-logging@3.1.4-1.GA_redhat_1.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"product": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"product_id": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dom4j-eap6@1.6.1-20.redhat_6.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"product": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"product_id": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ecj3@3.7.2-9.redhat_3.1.ep6.el5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"product": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"product_id": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster@1.2.9-1.Final_redhat_1.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"product": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"product_id": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc7@0.0.1-7.Alpha3_redhat_12.5.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el5.src",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el5.src",
"product_id": "httpd-0:2.2.26-35.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"product": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"product_id": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat7@7.0.54-6_patch_02.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"product": {
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"product_id": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat6@6.0.41-6_patch_02.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"product": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"product_id": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.14-3.SP1_redhat_1.1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"product": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"product_id": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/storeconfig-tc6@0.0.1-7.Alpha3_redhat_12.3.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"product": {
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"product_id": "mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk@1.2.40-2.redhat_1.ep6.el5?arch=src"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el5?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"product": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"product_id": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jboss-transaction-api_1.1_spec@1.0.1-12.Final_redhat_2.2.ep6.el5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"product": {
"name": "mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"product_id": "mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.2.26-35.ep6.el5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"product": {
"name": "httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"product_id": "httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.2.26-35.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"product": {
"name": "httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"product_id": "httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.2.26-35.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"product": {
"name": "httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"product_id": "httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.2.26-35.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el5.x86_64",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el5.x86_64",
"product_id": "httpd-0:2.2.26-35.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product_id": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-manual@1.2.40-2.redhat_1.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product_id": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-ap22@1.2.40-2.redhat_1.ep6.el5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "mod_ssl-1:2.2.26-35.ep6.el5.i386",
"product": {
"name": "mod_ssl-1:2.2.26-35.ep6.el5.i386",
"product_id": "mod_ssl-1:2.2.26-35.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.2.26-35.ep6.el5?arch=i386\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.2.26-35.ep6.el5.i386",
"product": {
"name": "httpd-devel-0:2.2.26-35.ep6.el5.i386",
"product_id": "httpd-devel-0:2.2.26-35.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.2.26-35.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.2.26-35.ep6.el5.i386",
"product": {
"name": "httpd-tools-0:2.2.26-35.ep6.el5.i386",
"product_id": "httpd-tools-0:2.2.26-35.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.2.26-35.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-manual-0:2.2.26-35.ep6.el5.i386",
"product": {
"name": "httpd-manual-0:2.2.26-35.ep6.el5.i386",
"product_id": "httpd-manual-0:2.2.26-35.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.2.26-35.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.2.26-35.ep6.el5.i386",
"product": {
"name": "httpd-0:2.2.26-35.ep6.el5.i386",
"product_id": "httpd-0:2.2.26-35.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.2.26-35.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"product": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"product_id": "mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_rt@2.4.1-6.GA.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"product": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"product_id": "mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_snmp@2.4.1-13.GA.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"product": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"product_id": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_cluster-native@1.2.9-3.Final_redhat_2.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"product": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"product_id": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tomcat-native@1.1.30-2.redhat_1.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product_id": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-manual@1.2.40-2.redhat_1.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product_id": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_jk-ap22@1.2.40-2.redhat_1.ep6.el5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"product": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"product_id": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/apache-commons-daemon-jsvc-eap6@1.0.15-6.redhat_2.ep6.el5?arch=i386\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch"
},
"product_reference": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src"
},
"product_reference": "antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch"
},
"product_reference": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src"
},
"product_reference": "apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch"
},
"product_reference": "apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch"
},
"product_reference": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src"
},
"product_reference": "apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64"
},
"product_reference": "apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch"
},
"product_reference": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src"
},
"product_reference": "apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch"
},
"product_reference": "apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch"
},
"product_reference": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src"
},
"product_reference": "dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch"
},
"product_reference": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src"
},
"product_reference": "ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src"
},
"product_reference": "hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.2.26-35.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64"
},
"product_reference": "httpd-0:2.2.26-35.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.2.26-35.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386"
},
"product_reference": "httpd-devel-0:2.2.26-35.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.2.26-35.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64"
},
"product_reference": "httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.2.26-35.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386"
},
"product_reference": "httpd-manual-0:2.2.26-35.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.2.26-35.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64"
},
"product_reference": "httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.2.26-35.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386"
},
"product_reference": "httpd-tools-0:2.2.26-35.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.2.26-35.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64"
},
"product_reference": "httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src"
},
"product_reference": "javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src"
},
"product_reference": "jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch"
},
"product_reference": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src"
},
"product_reference": "jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src"
},
"product_reference": "mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64"
},
"product_reference": "mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch"
},
"product_reference": "mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src"
},
"product_reference": "mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386"
},
"product_reference": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64"
},
"product_reference": "mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386"
},
"product_reference": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64"
},
"product_reference": "mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64"
},
"product_reference": "mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64"
},
"product_reference": "mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.2.26-35.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386"
},
"product_reference": "mod_ssl-1:2.2.26-35.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.2.26-35.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64"
},
"product_reference": "mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch"
},
"product_reference": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src"
},
"product_reference": "storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch"
},
"product_reference": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src"
},
"product_reference": "storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64"
},
"product_reference": "tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src"
},
"product_reference": "tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src"
},
"product_reference": "tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server",
"product_id": "5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
},
"product_reference": "tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"relates_to_product_reference": "5Server-JBEWS-2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4590",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2014-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1069911"
}
],
"notes": [
{
"category": "description",
"text": "It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. An attacker able to deploy malicious applications to Tomcat could use this flaw to circumvent security restrictions set by the JSM, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running applications from untrusted sources, such as in a shared hosting environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "tomcat: information disclosure via XXE when running untrusted web applications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect JBoss Web, as shipped with various Red Hat JBoss products.\n\nThis issue does affect Tomcat 5 as shipped by Red Hat Enterprise Linux 5. The risks in breaking compatibility associated with fixing this flaw outweigh the benefits of the fix, therefore Red Hat does not plan to fix this flaw in Red Hat Enterprise Linux 5. Additionally, note that Red Hat Enterprise Linux 5 is currently in reduced support phase, receiving only Critical security updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/site/support/policy/updates/errata#Production_3_Phase",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4590"
},
{
"category": "external",
"summary": "RHBZ#1069911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1069911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4590",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4590"
}
],
"release_date": "2014-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "tomcat: information disclosure via XXE when running untrusted web applications"
},
{
"cve": "CVE-2014-0118",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120601"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_deflate module handled request body decompression (configured via the \"DEFLATE\" input filter). A remote attacker able to send a request whose body would be decompressed could use this flaw to consume an excessive amount of system memory and CPU on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_deflate denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0118"
},
{
"category": "external",
"summary": "RHBZ#1120601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0118",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0118"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_deflate denial of service"
},
{
"cve": "CVE-2014-0119",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"discovery_date": "2014-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1102038"
}
],
"notes": [
{
"category": "description",
"text": "It was found that, in certain circumstances, it was possible for a malicious web application to replace the XML parsers used by JBoss Web / Apache Tomcat to process XSLTs for the default servlet, JSP documents, tag library descriptors (TLDs), and tag plug-in configuration files. The injected XML parser(s) could then bypass the limits imposed on XML external entities and/or gain access to the XML files processed for other web applications deployed on the same JBoss Web / Apache Tomcat instance.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: XML parser hijack by malicious web application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0119"
},
{
"category": "external",
"summary": "RHBZ#1102038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1102038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0119"
}
],
"release_date": "2014-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Tomcat/JBossWeb: XML parser hijack by malicious web application"
},
{
"cve": "CVE-2014-0226",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120603"
}
],
"notes": [
{
"category": "description",
"text": "A race condition flaw, leading to heap-based buffer overflows, was found in the mod_status httpd module. A remote attacker able to access a status page served by mod_status on a server using a threaded Multi-Processing Module (MPM) could send a specially crafted request that would cause the httpd child process to crash or, possibly, allow the attacker to execute arbitrary code with the privileges of the \"apache\" user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_status heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0226"
},
{
"category": "external",
"summary": "RHBZ#1120603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0226",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0226"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "httpd: mod_status heap-based buffer overflow"
},
{
"cve": "CVE-2014-0227",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2014-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1109196"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the ChunkedInputFilter in Tomcat did not fail subsequent attempts to read input after malformed chunked encoding was detected. A remote attacker could possibly use this flaw to make Tomcat process part of the request body as new request, or cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0227"
},
{
"category": "external",
"summary": "RHBZ#1109196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1109196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0227",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0227"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43",
"url": "https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.43"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.55"
}
],
"release_date": "2015-02-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter"
},
{
"cve": "CVE-2014-0231",
"discovery_date": "2014-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1120596"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way httpd\u0027s mod_cgid module executed CGI scripts that did not read data from the standard input. A remote attacker could submit a specially crafted request that would cause the httpd child process to hang indefinitely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_cgid denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0231"
},
{
"category": "external",
"summary": "RHBZ#1120596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1120596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0231",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0231"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2014-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-08-21T15:29:13+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied, and back up your existing Red\nHat JBoss Web Server installation (including all applications and\nconfiguration files).\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1088"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.noarch",
"5Server-JBEWS-2:antlr-eap6-0:2.7.7-17.redhat_4.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-collections-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-collections-tomcat-eap6-0:3.2.1-15.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-daemon-eap6-1:1.0.15-5.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-daemon-jsvc-eap6-1:1.0.15-6.redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:apache-commons-pool-eap6-0:1.6-7.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:apache-commons-pool-tomcat-eap6-0:1.6-7.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.noarch",
"5Server-JBEWS-2:dom4j-eap6-0:1.6.1-20.redhat_6.1.ep6.el5.src",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.noarch",
"5Server-JBEWS-2:ecj3-1:3.7.2-9.redhat_3.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-c3p0-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-core-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:hibernate4-entitymanager-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-envers-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:hibernate4-infinispan-eap6-0:4.2.14-3.SP1_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.src",
"5Server-JBEWS-2:httpd-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-devel-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-manual-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:httpd-tools-0:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:javassist-eap6-0:3.18.1-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-logging-0:3.1.4-1.GA_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.noarch",
"5Server-JBEWS-2:jboss-transaction-api_1.1_spec-0:1.0.1-12.Final_redhat_2.2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-0:1.2.9-1.Final_redhat_1.1.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.i386",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.src",
"5Server-JBEWS-2:mod_cluster-native-0:1.2.9-3.Final_redhat_2.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_cluster-tomcat6-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_cluster-tomcat7-0:1.2.9-1.Final_redhat_1.1.ep6.el5.noarch",
"5Server-JBEWS-2:mod_jk-0:1.2.40-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-ap22-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:mod_jk-manual-0:1.2.40-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_rt-0:2.4.1-6.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.i386",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.src",
"5Server-JBEWS-2:mod_snmp-0:2.4.1-13.GA.ep6.el5.x86_64",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.i386",
"5Server-JBEWS-2:mod_ssl-1:2.2.26-35.ep6.el5.x86_64",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc6-0:0.0.1-7.Alpha3_redhat_12.3.ep6.el5.src",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.noarch",
"5Server-JBEWS-2:storeconfig-tc7-0:0.0.1-7.Alpha3_redhat_12.5.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.i386",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.src",
"5Server-JBEWS-2:tomcat-native-0:1.1.30-2.redhat_1.ep6.el5.x86_64",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-0:6.0.41-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat6-admin-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-docs-webapp-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-el-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-javadoc-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-jsp-2.1-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-lib-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-log4j-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-servlet-2.5-api-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat6-webapps-0:6.0.41-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-0:7.0.54-6_patch_02.ep6.el5.src",
"5Server-JBEWS-2:tomcat7-admin-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-docs-webapp-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-el-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-javadoc-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-jsp-2.2-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-lib-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-log4j-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-servlet-3.0-api-0:7.0.54-6_patch_02.ep6.el5.noarch",
"5Server-JBEWS-2:tomcat7-webapps-0:7.0.54-6_patch_02.ep6.el5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_cgid denial of service"
}
]
}
SUSE-SU-2015:0689-1
Vulnerability from csaf_suse - Published: 2014-09-11 22:20 - Updated: 2014-09-11 22:20Summary
Recommended update for apache2
Severity
Moderate
Notes
Title of the patch: Recommended update for apache2
Description of the patch:
This update for the Apache Web Server introduces directives to control two
protocol options:
* HttpContentLengthHeadZero: Allow responses to HEAD request with
Content-Length of 0
* HttpExpectStrict: Allow the administrator to control whether clients
must send '100-continue'
MODULE_MAGIC_NUMBER_MINOR has been increased to 24, as this change is not
forward-compatible. Modules built against this release might not work
correctly with older releases of the Apache Web Server.
Patchnames: sdksp3-apache2,slessp3-apache2
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
107 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Recommended update for apache2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the Apache Web Server introduces directives to control two \nprotocol options:\n\n * HttpContentLengthHeadZero: Allow responses to HEAD request with\n Content-Length of 0\n * HttpExpectStrict: Allow the administrator to control whether clients\n must send \u0027100-continue\u0027\n\nMODULE_MAGIC_NUMBER_MINOR has been increased to 24, as this change is not \nforward-compatible. Modules built against this release might not work \ncorrectly with older releases of the Apache Web Server.\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp3-apache2,slessp3-apache2",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0689-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:0689-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150689-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:0689-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-April/001337.html"
},
{
"category": "self",
"summary": "SUSE Bug 713970",
"url": "https://bugzilla.suse.com/713970"
},
{
"category": "self",
"summary": "SUSE Bug 791794",
"url": "https://bugzilla.suse.com/791794"
},
{
"category": "self",
"summary": "SUSE Bug 815621",
"url": "https://bugzilla.suse.com/815621"
},
{
"category": "self",
"summary": "SUSE Bug 829056",
"url": "https://bugzilla.suse.com/829056"
},
{
"category": "self",
"summary": "SUSE Bug 829057",
"url": "https://bugzilla.suse.com/829057"
},
{
"category": "self",
"summary": "SUSE Bug 844212",
"url": "https://bugzilla.suse.com/844212"
},
{
"category": "self",
"summary": "SUSE Bug 852401",
"url": "https://bugzilla.suse.com/852401"
},
{
"category": "self",
"summary": "SUSE Bug 859916",
"url": "https://bugzilla.suse.com/859916"
},
{
"category": "self",
"summary": "SUSE Bug 869105",
"url": "https://bugzilla.suse.com/869105"
},
{
"category": "self",
"summary": "SUSE Bug 869106",
"url": "https://bugzilla.suse.com/869106"
},
{
"category": "self",
"summary": "SUSE Bug 871310",
"url": "https://bugzilla.suse.com/871310"
},
{
"category": "self",
"summary": "SUSE Bug 887765",
"url": "https://bugzilla.suse.com/887765"
},
{
"category": "self",
"summary": "SUSE Bug 887768",
"url": "https://bugzilla.suse.com/887768"
},
{
"category": "self",
"summary": "SUSE Bug 894225",
"url": "https://bugzilla.suse.com/894225"
},
{
"category": "self",
"summary": "SUSE Bug 899836",
"url": "https://bugzilla.suse.com/899836"
},
{
"category": "self",
"summary": "SUSE Bug 904427",
"url": "https://bugzilla.suse.com/904427"
},
{
"category": "self",
"summary": "SUSE Bug 907339",
"url": "https://bugzilla.suse.com/907339"
},
{
"category": "self",
"summary": "SUSE Bug 907477",
"url": "https://bugzilla.suse.com/907477"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2003-1418 page",
"url": "https://www.suse.com/security/cve/CVE-2003-1418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1862 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1896 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-5704 page",
"url": "https://www.suse.com/security/cve/CVE-2013-5704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6438 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6438/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0098 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0226 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0231 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3581 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3581/"
}
],
"title": "Recommended update for apache2",
"tracking": {
"current_release_date": "2014-09-11T22:20:05Z",
"generator": {
"date": "2014-09-11T22:20:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:0689-1",
"initial_release_date": "2014-09-11T22:20:05Z",
"revision_history": [
{
"date": "2014-09-11T22:20:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-2.2.12-1.50.1.i586",
"product_id": "apache2-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-devel-2.2.12-1.50.1.i586",
"product_id": "apache2-devel-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-doc-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-doc-2.2.12-1.50.1.i586",
"product_id": "apache2-doc-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-example-pages-2.2.12-1.50.1.i586",
"product_id": "apache2-example-pages-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-prefork-2.2.12-1.50.1.i586",
"product_id": "apache2-prefork-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-utils-2.2.12-1.50.1.i586",
"product_id": "apache2-utils-2.2.12-1.50.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.2.12-1.50.1.i586",
"product": {
"name": "apache2-worker-2.2.12-1.50.1.i586",
"product_id": "apache2-worker-2.2.12-1.50.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-devel-2.2.12-1.50.1.ia64",
"product_id": "apache2-devel-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-2.2.12-1.50.1.ia64",
"product_id": "apache2-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-doc-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-doc-2.2.12-1.50.1.ia64",
"product_id": "apache2-doc-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-example-pages-2.2.12-1.50.1.ia64",
"product_id": "apache2-example-pages-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-prefork-2.2.12-1.50.1.ia64",
"product_id": "apache2-prefork-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-utils-2.2.12-1.50.1.ia64",
"product_id": "apache2-utils-2.2.12-1.50.1.ia64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.2.12-1.50.1.ia64",
"product": {
"name": "apache2-worker-2.2.12-1.50.1.ia64",
"product_id": "apache2-worker-2.2.12-1.50.1.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-devel-2.2.12-1.50.1.ppc64",
"product_id": "apache2-devel-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-2.2.12-1.50.1.ppc64",
"product_id": "apache2-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-doc-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-doc-2.2.12-1.50.1.ppc64",
"product_id": "apache2-doc-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-example-pages-2.2.12-1.50.1.ppc64",
"product_id": "apache2-example-pages-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-prefork-2.2.12-1.50.1.ppc64",
"product_id": "apache2-prefork-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-utils-2.2.12-1.50.1.ppc64",
"product_id": "apache2-utils-2.2.12-1.50.1.ppc64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.2.12-1.50.1.ppc64",
"product": {
"name": "apache2-worker-2.2.12-1.50.1.ppc64",
"product_id": "apache2-worker-2.2.12-1.50.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-devel-2.2.12-1.50.1.s390x",
"product_id": "apache2-devel-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-2.2.12-1.50.1.s390x",
"product_id": "apache2-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-doc-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-doc-2.2.12-1.50.1.s390x",
"product_id": "apache2-doc-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-example-pages-2.2.12-1.50.1.s390x",
"product_id": "apache2-example-pages-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-prefork-2.2.12-1.50.1.s390x",
"product_id": "apache2-prefork-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-utils-2.2.12-1.50.1.s390x",
"product_id": "apache2-utils-2.2.12-1.50.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.2.12-1.50.1.s390x",
"product": {
"name": "apache2-worker-2.2.12-1.50.1.s390x",
"product_id": "apache2-worker-2.2.12-1.50.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-2.2.12-1.50.1.x86_64",
"product_id": "apache2-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-devel-2.2.12-1.50.1.x86_64",
"product_id": "apache2-devel-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-doc-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-doc-2.2.12-1.50.1.x86_64",
"product_id": "apache2-doc-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"product_id": "apache2-example-pages-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-prefork-2.2.12-1.50.1.x86_64",
"product_id": "apache2-prefork-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-utils-2.2.12-1.50.1.x86_64",
"product_id": "apache2-utils-2.2.12-1.50.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.2.12-1.50.1.x86_64",
"product": {
"name": "apache2-worker-2.2.12-1.50.1.x86_64",
"product_id": "apache2-worker-2.2.12-1.50.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-devel-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-devel-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-devel-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-devel-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-devel-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-doc-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-example-pages-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-prefork-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-utils-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.2.12-1.50.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
},
"product_reference": "apache2-worker-2.2.12-1.50.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-1418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2003-1418"
}
],
"notes": [
{
"category": "general",
"text": "Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2003-1418",
"url": "https://www.suse.com/security/cve/CVE-2003-1418"
},
{
"category": "external",
"summary": "SUSE Bug 713970 for CVE-2003-1418",
"url": "https://bugzilla.suse.com/713970"
},
{
"category": "external",
"summary": "SUSE Bug 907477 for CVE-2003-1418",
"url": "https://bugzilla.suse.com/907477"
},
{
"category": "external",
"summary": "SUSE Bug 917402 for CVE-2003-1418",
"url": "https://bugzilla.suse.com/917402"
},
{
"category": "external",
"summary": "SUSE Bug 970126 for CVE-2003-1418",
"url": "https://bugzilla.suse.com/970126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2003-1418"
},
{
"cve": "CVE-2013-1862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1862"
}
],
"notes": [
{
"category": "general",
"text": "mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1862",
"url": "https://www.suse.com/security/cve/CVE-2013-1862"
},
{
"category": "external",
"summary": "SUSE Bug 829056 for CVE-2013-1862",
"url": "https://bugzilla.suse.com/829056"
},
{
"category": "external",
"summary": "SUSE Bug 829057 for CVE-2013-1862",
"url": "https://bugzilla.suse.com/829057"
},
{
"category": "external",
"summary": "SUSE Bug 834475 for CVE-2013-1862",
"url": "https://bugzilla.suse.com/834475"
},
{
"category": "external",
"summary": "SUSE Bug 844212 for CVE-2013-1862",
"url": "https://bugzilla.suse.com/844212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2013-1862"
},
{
"cve": "CVE-2013-1896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1896"
}
],
"notes": [
{
"category": "general",
"text": "mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1896",
"url": "https://www.suse.com/security/cve/CVE-2013-1896"
},
{
"category": "external",
"summary": "SUSE Bug 829056 for CVE-2013-1896",
"url": "https://bugzilla.suse.com/829056"
},
{
"category": "external",
"summary": "SUSE Bug 829057 for CVE-2013-1896",
"url": "https://bugzilla.suse.com/829057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2013-1896"
},
{
"cve": "CVE-2013-5704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-5704"
}
],
"notes": [
{
"category": "general",
"text": "The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass \"RequestHeader unset\" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states \"this is not a security issue in httpd as such.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-5704",
"url": "https://www.suse.com/security/cve/CVE-2013-5704"
},
{
"category": "external",
"summary": "SUSE Bug 871310 for CVE-2013-5704",
"url": "https://bugzilla.suse.com/871310"
},
{
"category": "external",
"summary": "SUSE Bug 914535 for CVE-2013-5704",
"url": "https://bugzilla.suse.com/914535"
},
{
"category": "external",
"summary": "SUSE Bug 930944 for CVE-2013-5704",
"url": "https://bugzilla.suse.com/930944"
},
{
"category": "external",
"summary": "SUSE Bug 938728 for CVE-2013-5704",
"url": "https://bugzilla.suse.com/938728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "low"
}
],
"title": "CVE-2013-5704"
},
{
"cve": "CVE-2013-6438",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6438"
}
],
"notes": [
{
"category": "general",
"text": "The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6438",
"url": "https://www.suse.com/security/cve/CVE-2013-6438"
},
{
"category": "external",
"summary": "SUSE Bug 869105 for CVE-2013-6438",
"url": "https://bugzilla.suse.com/869105"
},
{
"category": "external",
"summary": "SUSE Bug 869106 for CVE-2013-6438",
"url": "https://bugzilla.suse.com/869106"
},
{
"category": "external",
"summary": "SUSE Bug 887765 for CVE-2013-6438",
"url": "https://bugzilla.suse.com/887765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2013-6438"
},
{
"cve": "CVE-2014-0098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0098"
}
],
"notes": [
{
"category": "general",
"text": "The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0098",
"url": "https://www.suse.com/security/cve/CVE-2014-0098"
},
{
"category": "external",
"summary": "SUSE Bug 869106 for CVE-2014-0098",
"url": "https://bugzilla.suse.com/869106"
},
{
"category": "external",
"summary": "SUSE Bug 887765 for CVE-2014-0098",
"url": "https://bugzilla.suse.com/887765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2014-0098"
},
{
"cve": "CVE-2014-0226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0226"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0226",
"url": "https://www.suse.com/security/cve/CVE-2014-0226"
},
{
"category": "external",
"summary": "SUSE Bug 887765 for CVE-2014-0226",
"url": "https://bugzilla.suse.com/887765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2014-0226"
},
{
"cve": "CVE-2014-0231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0231"
}
],
"notes": [
{
"category": "general",
"text": "The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0231",
"url": "https://www.suse.com/security/cve/CVE-2014-0231"
},
{
"category": "external",
"summary": "SUSE Bug 887768 for CVE-2014-0231",
"url": "https://bugzilla.suse.com/887768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2014-0231"
},
{
"cve": "CVE-2014-3581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3581"
}
],
"notes": [
{
"category": "general",
"text": "The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3581",
"url": "https://www.suse.com/security/cve/CVE-2014-3581"
},
{
"category": "external",
"summary": "SUSE Bug 899836 for CVE-2014-3581",
"url": "https://bugzilla.suse.com/899836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-1.50.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-1.50.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2014-09-11T22:20:05Z",
"details": "moderate"
}
],
"title": "CVE-2014-3581"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…