Skip to content
OpenAdvisories
Unscored RHSA-2008:0151 5 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP02 security update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 25

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 glassfish-javamail 0:1.4.0-0jpp.ep1.8
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-annotations 0:3.2.1-1.patch02.1jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-annotations-javadoc 0:3.2.1-1.patch02.1jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-entitymanager 0:3.2.1-1jpp.ep1.6.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-entitymanager-javadoc 0:3.2.1-1jpp.ep1.6.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-javadoc 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hsqldb 1:1.8.0.8-2.patch01.1jpp.ep1.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jacorb 0:2.3.0-1jpp.ep1.4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jacorb-demo 0:2.3.0-1jpp.ep1.4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jacorb-javadoc 0:2.3.0-1jpp.ep1.4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jacorb-manual 0:2.3.0-1jpp.ep1.4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-aop 0:1.5.5-1.CP01.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-cache 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-remoting 0:2.2.2-3.SP4.0jpp.ep1.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam 0:1.2.1-1.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam-docs 0:1.2.1-1.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas 0:4.2.0-3.GA_CP02.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossweb 0:2.0.0-3.CP05.0jpp.ep1.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossws-jboss42 0:1.2.1-0jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jcommon 0:1.0.12-1jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jfreechart 0:1.0.9-1jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jgroups 1:2.4.1-1.SP4.0jpp.ep1.2
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs 0:4.2.0-3.GA_CP02.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs-examples 0:4.2.0-3.GA_CP02.ep1.1.el4

Vulnerabilities 5

  • Unscored —
    CVE-2007-4575 EPSS 14%

    HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute…

    hsqldb Debian
  • Low —
    CVE-2007-5461 Public exploit EPSS 40%

    Apache Tomcat Path Traversal Vulnerability

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that s…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-6306

    Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers…

    libjfreechart-java Debian
  • Unscored —
    CVE-2007-6433

    The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remot…

  • Medium —
    CVE-2008-0002

    Apache Tomcat Sensitive Information Disclosure

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this …

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://redhat.com/docs/manuals/jboss/jboss-eap-4.2.0.cp02/readme.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=299801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=421081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=426206
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0151.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4575
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4575
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4575
  • report
    https://access.redhat.com/security/cve/CVE-2007-5461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=333791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5461
  • report
    https://access.redhat.com/security/cve/CVE-2007-6306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6306
  • report
    https://access.redhat.com/security/cve/CVE-2007-6433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6433
  • report
    https://access.redhat.com/security/cve/CVE-2008-0002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432327
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0002
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0002