Skip to content
OpenAdvisories
Unscored RHSA-2008:0833 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP04 security update

Published Sep 29, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 glassfish-javamail 0:1.4.0-0jpp.ep1.10.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-annotations 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-annotations-javadoc 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-javadoc 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 hibernate3-validator 0:0.0.0-1.1jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-aop 0:1.5.5-2.CP02.0jpp.ep1.2.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-remoting 0:2.2.2-3.SP9.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam 0:1.2.1-1.ep1.10.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jboss-seam-docs 0:1.2.1-1.ep1.10.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossas 0:4.2.0-3.GA_CP04.ep1.8.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossts 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 jbossweb 0:2.0.0-4.CP06.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs 0:4.2.0-4.GA_CP04.ep1.5.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el4 rh-eap-docs-examples 0:4.2.0-4.GA_CP04.ep1.5.el4

Vulnerabilities 2

  • Medium —
    CVE-2007-5342

    JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

    The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite a…

    org.apache.tomcat:tomcat-juli Maven
  • Unscored —
    CVE-2008-3519

    The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EA…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=427216
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=456973
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458823
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0833.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-5342
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5342
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5342
  • report
    https://access.redhat.com/security/cve/CVE-2008-3519
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3519
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3519