Skip to content
OpenAdvisories
Unscored RHSA-2008:0213 5 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP02 security update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-annotations 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-annotations-javadoc 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-javadoc 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jacorb 0:2.3.0-1jpp.ep1.5.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-aop 0:1.5.5-1.CP01.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-cache 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-remoting 0:2.2.2-3.SP4.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-seam 0:1.2.1-1.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-seam-docs 0:1.2.1-1.ep1.3.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas 0:4.2.0-4.GA_CP02.ep1.3.el5.3
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossweb 0:2.0.0-3.CP05.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jcommon 0:1.0.12-1jpp.ep1.2.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jfreechart 0:1.0.9-1jpp.ep1.2.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 rh-eap-docs 0:4.2.0-3.GA_CP02.ep1.1.el5.1
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 rh-eap-docs-examples 0:4.2.0-3.GA_CP02.ep1.1.el5.1

Vulnerabilities 5

  • Unscored —
    CVE-2007-4575 EPSS 14%

    HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute…

    hsqldb Debian
  • Low —
    CVE-2007-5461 Public exploit EPSS 40%

    Apache Tomcat Path Traversal Vulnerability

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that s…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-6306

    Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers…

    libjfreechart-java Debian
  • Unscored —
    CVE-2007-6433

    The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remot…

  • Medium —
    CVE-2008-0002

    Apache Tomcat Sensitive Information Disclosure

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this …

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://redhat.com/docs/manuals/jboss/jboss-eap-4.2.0.cp02/readme.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=299801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=421081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=426206
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0213.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4575
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4575
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4575
  • report
    https://access.redhat.com/security/cve/CVE-2007-5461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=333791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5461
  • report
    https://access.redhat.com/security/cve/CVE-2007-6306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6306
  • report
    https://access.redhat.com/security/cve/CVE-2007-6433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6433
  • report
    https://access.redhat.com/security/cve/CVE-2008-0002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432327
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0002
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0002