Skip to content
OpenAdvisories
Unscored RHSA-2012:0682 10 CVEs

Red Hat Security Advisory: tomcat6 security and bug fix update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-admin-webapps 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-docs-webapp 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-el-1.0-api 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-javadoc 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-jsp-2.1-api 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-lib 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-log4j 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-servlet-2.5-api 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 tomcat6-webapps 0:6.0.32-24_patch_07.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-admin-webapps 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-docs-webapp 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-el-1.0-api 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-javadoc 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-jsp-2.1-api 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-lib 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-log4j 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-servlet-2.5-api 0:6.0.32-24_patch_07.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 tomcat6-webapps 0:6.0.32-24_patch_07.ep5.el6

Vulnerabilities 10

  • Medium —
    CVE-2011-1184

    Authentication Bypass in Apache Tomcat

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intende…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-2204

    Insertion of Sensitive Information into Log File in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information …

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-2526

    Improper Input Validation in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or…

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2011-3190 EPSS 15%

    Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

    Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-3375

    Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

    Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-4858 Public exploit EPSS 80%

    Improper Input Validation in Apache Tomcat

    Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption)…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-5062

    Improper Authentication in Apache Tomcat

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=au…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-5063

    Improper Authentication in Apache Tomcat

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availa…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2011-5064

    Use of Hard-coded Cryptographic Key in Apache Tomcat

    DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote a…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2012-0022 EPSS 10%

    Denial of Service in Apache Tomcat

    Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and para…

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://tomcat.apache.org/security-6.html
  • article
    https://issues.jboss.org/browse/JBPAPP-4873
  • article
    https://issues.jboss.org/browse/JBPAPP-6133
  • article
    https://issues.jboss.org/browse/JBPAPP-6852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=717013
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=720948
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=734868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=741401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=782624
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=783359
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0682.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1184
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1184
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1184
  • report
    https://access.redhat.com/security/cve/CVE-2011-2204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2204
  • report
    https://access.redhat.com/security/cve/CVE-2011-2526
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2526
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2526
  • report
    https://access.redhat.com/security/cve/CVE-2011-3190
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3190
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3190
  • report
    https://access.redhat.com/security/cve/CVE-2011-3375
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3375
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3375
  • report
    https://access.redhat.com/security/cve/CVE-2011-4858
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4858
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4858
  • report
    https://access.redhat.com/security/cve/CVE-2011-5062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-5062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-5062
  • report
    https://access.redhat.com/security/cve/CVE-2011-5063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-5063
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-5063
  • report
    https://access.redhat.com/security/cve/CVE-2011-5064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-5064