Important CentOS tomcat6 Update

Metadata

medium
5.0
tomcat6-6.0.24-52.el6_4.noarch.rpm, tomcat6-6.0.24-52.el6_4.src.rpm, tomcat6-admin-webapps-6.0.24-52.el6_4.noarch.rpm, tomcat6-docs-webapp-6.0.24-52.el6_4.noarch.rpm, tomcat6-el-2.1-api-6.0.24-52.el6_4.noarch.rpm, tomcat6-javadoc-6.0.24-52.el6_4.noarch.rpm, tomcat6-jsp-2.1-api-6.0.24-52.el6_4.noarch.rpm, tomcat6-lib-6.0.24-52.el6_4.noarch.rpm, tomcat6-servlet-2.5-api-6.0.24-52.el6_4.noarch.rpm, tomcat6-webapps-6.0.24-52.el6_4.noarch.rpm
CVE-2012-3546, CVE-2012-4534, CVE-2012-5885, CVE-2012-5886, CVE-2012-5887
rhn.redhat.com, lists.centos.org
2013-03-12
2017-07-27 19:05
Important CentOS tomcat5 Update
CVE-2012-5886 tomcat6
CVE-2012-5887 tomcat6
CVE-2012-5886 tomcat7
CVE-2012-4534 tomcat6
CVE-2012-5887 tomcat7
CVE-2012-3546 tomcat6
CVE-2012-5885 tomcat6
CVE-2012-4534 tomcat7
CVE-2012-3546 tomcat7
CVE-2012-5885 tomcat7
CVE-2012-5887
CVE-2012-4534
CVE-2012-3546
CVE-2012-5885
CVE-2012-5886
2017-04-01 19:06
2017-01-05 20:10

Description


Updated tomcat6 packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.

Apache Tomcat is a servlet container.

It was found that when an application used FORM authentication, along with
another component that calls request.setUserPrincipal() before the call to
FormAuthenticator#authenticate() (such as the Single-Sign-On valve), it was
possible to bypass the security constraint checks in the FORM authenticator
by appending "/j_security_check" to the end of a URL. A remote attacker
with an authenticated session on an affected application could use this
flaw to circumvent authorization controls, and thereby access resources not
permitted by the roles associated with their authenticated session.
(CVE-2012-3546)

A flaw was found in the way Tomcat handled sendfile operations when using
the HTTP NIO (Non-Blocking I/O) connector and HTTPS. A remote attacker
could use this flaw to cause a denial of service (infinite loop). The HTTP
blocking IO (BIO) connector, which is not vulnerable to this issue, is used
by default in Red Hat Enterprise Linux 6. (CVE-2012-4534)

Multiple weaknesses were found in the Tomcat DIGEST authentication
implementation, effectively reducing the security normally provided by
DIGEST authentication. A remote attacker could use these flaws to perform
replay attacks in some circumstances. (CVE-2012-5885, CVE-2012-5886,
CVE-2012-5887)

Users of Tomcat should upgrade to these updated packages, which correct
these issues. Tomcat must be restarted for this update to take effect.
Please see https://www.redhat.com/footer/terms-of-use.html

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

Release Package Patched in
6 tomcat6 tomcat6-6.0.24-52.el6_4.noarch.rpm
tomcat6 tomcat6-6.0.24-52.el6_4.src.rpm
tomcat6-admin-webapps tomcat6-admin-webapps-6.0.24-52.el6_4.noarch.rpm
tomcat6-docs-webapp tomcat6-docs-webapp-6.0.24-52.el6_4.noarch.rpm
tomcat6-el-2.1-api tomcat6-el-2.1-api-6.0.24-52.el6_4.noarch.rpm
tomcat6-javadoc tomcat6-javadoc-6.0.24-52.el6_4.noarch.rpm
tomcat6-jsp-2.1-api tomcat6-jsp-2.1-api-6.0.24-52.el6_4.noarch.rpm
tomcat6-lib tomcat6-lib-6.0.24-52.el6_4.noarch.rpm
tomcat6-servlet-2.5-api tomcat6-servlet-2.5-api-6.0.24-52.el6_4.noarch.rpm
tomcat6-webapps tomcat6-webapps-6.0.24-52.el6_4.noarch.rpm