Vulnerability-Lookup

RHSA-2011_0897

Vulnerability from csaf_redhat - Published: 2011-06-22 23:31 - Updated: 2024-11-22 04:48

Summary

Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update

Severity

Moderate

Notes

Topic: JBoss Enterprise Web Server 1.0.2 is now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: JBoss Enterprise Web Server is a fully-integrated and certified set of components for hosting Java web applications. This is the first release of JBoss Enterprise Web Server for Red Hat Enterprise Linux 6. For Red Hat Enterprise Linux 4 and 5, this release serves as a replacement for JBoss Enterprise Web Server 1.0.1, and includes a number of bug fixes. Refer to the Release Notes, linked in the References, for more information. This update corrects security flaws in the following components: tomcat6: A cross-site scripting (XSS) flaw was found in the Manager application, used for managing web applications on Apache Tomcat. If a remote attacker could trick a user who is logged into the Manager application into visiting a specially-crafted URL, the attacker could perform Manager application tasks with the privileges of the logged in user. (CVE-2010-4172) tomcat5 and tomcat6: It was found that web applications could modify the location of the Apache Tomcat host's work directory. As web applications deployed on Tomcat have read and write access to this directory, a malicious web application could use this flaw to trick Tomcat into giving it read and write access to an arbitrary directory on the file system. (CVE-2010-3718) A second cross-site scripting (XSS) flaw was found in the Manager application. A malicious web application could use this flaw to conduct an XSS attack, leading to arbitrary web script execution with the privileges of victims who are logged into and viewing Manager application web pages. (CVE-2011-0013) A possible minor information leak was found in the way Apache Tomcat generated HTTP BASIC and DIGEST authentication requests. For configurations where a realm name was not specified and Tomcat was accessed via a proxy, the default generated realm contained the hostname and port used by the proxy to send requests to the Tomcat server. (CVE-2010-1157) httpd: A flaw was found in the way the mod_dav module of the Apache HTTP Server handled certain requests. If a remote attacker were to send a carefully crafted request to the server, it could cause the httpd child process to crash. (CVE-2010-1452) apr: It was found that the apr_fnmatch() function used an unconstrained recursion when processing patterns with the '*' wildcard. An attacker could use this flaw to cause an application using this function, which also accepted untrusted input as a pattern for matching (such as an httpd server using the mod_autoindex module), to exhaust all stack memory or use an excessive amount of CPU time when performing matching. (CVE-2011-0419) apr-util: It was found that certain input could cause the apr-util library to allocate more memory than intended in the apr_brigade_split_line() function. An attacker able to provide input in small chunks to an application using the apr-util library (such as httpd) could possibly use this flaw to trigger high memory consumption. Note: This issue only affected the JBoss Enterprise Web Server packages on Red Hat Enterprise Linux 4. (CVE-2010-1623) All users of JBoss Enterprise Web Server 1.0.1 are advised to upgrade to JBoss Enterprise Web Server 1.0.2, which corrects these issues. After installing this update, the relevant Apache Tomcat service ("tomcat5" or "tomcat6") and the Apache HTTP Server ("httpd") must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2010-1157

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected products

Fixed 704 products

Product	Version	Remediation
Unresolved product id: 4AS-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:bcel-0:5.2-8.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:bcel-0:5.2-8.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:cglib-0:2.2-5.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:cglib-0:2.2-5.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:ecj-1:3.3.1.1-3.2.2.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:ecj-1:3.3.1.1-3.2.2.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-jaf-0:1.1.0-6.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-jaf-0:1.1.0-6.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-javamail-0:1.4.2-0.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-javamail-0:1.4.2-0.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-2.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-2.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-1:3.3.2-1.5.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-1:3.3.2-1.5.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.3.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-annotations-javadoc-0:3.4.0-3.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-commons-annotations-javadoc-0:3.1.0-1.8.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-javadoc-1:1.0.2-3.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-entitymanager-javadoc-0:3.4.0-4.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:hibernate3-javadoc-1:3.3.2-1.5.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-util-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-util-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-util-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-apr-util-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-debuginfo-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-debuginfo-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-manual-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:httpd22-manual-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-collections-tomcat5-0:3.2.1-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-debuginfo-1:1.0.5-1.4.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-debuginfo-1:1.0.5-1.4.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-dbcp-tomcat5-0:1.2.1-16.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-el-0:1.0-19.2.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-el-0:1.0-19.2.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-launcher-0:1.1-4.6.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-launcher-0:1.1-4.6.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-logging-tomcat6-0:1.1.1-0.4.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-modeler-0:2.0-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-modeler-0:2.0-4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-pool-tomcat5-0:1.3-11.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-javaee-0:5.0.1-2.9.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-javaee-poms-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-jms-1.1-api-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jboss-transaction-1.0.1-api-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:log4j-0:1.2.14-18.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:log4j-0:1.2.14-18.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-0:1.0.10-2.GA_CP01.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-demo-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-jbossas-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-jbossweb2-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-native-debuginfo-0:1.0.10-2.GA_CP01.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-native-debuginfo-0:1.0.10-2.GA_CP01.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_cluster-tomcat6-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-0:1.2.31-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-debuginfo-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-debuginfo-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_ssl22-1:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mod_ssl22-1:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mx4j-1:3.0.1-9.3.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:mx4j-1:3.0.1-9.3.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:regexp-0:1.5-1.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:regexp-0:1.5-1.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:struts12-0:1.2.9-3.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:struts12-0:1.2.9-3.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-native-debuginfo-0:1.1.20-2.0.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat-native-debuginfo-0:1.1.20-2.0.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-0:5.5.33-14_patch_04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-jasper-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-parent-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat5-webapps-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-0:6.0.32-15_patch_03.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-lib-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-log4j-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:tomcat6-webapps-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xml-commons-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xml-commons-1:1.3.04-7.12.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xml-commons-jaxp-1.2-apis-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xml-commons-jaxp-1.3-apis-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4AS-JBEWS-5.0.0:xml-commons-resolver12-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:bcel-0:5.2-8.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:bcel-0:5.2-8.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:cglib-0:2.2-5.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:cglib-0:2.2-5.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:ecj-1:3.3.1.1-3.2.2.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:ecj-1:3.3.1.1-3.2.2.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-jaf-0:1.1.0-6.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-jaf-0:1.1.0-6.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-javamail-0:1.4.2-0.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-javamail-0:1.4.2-0.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-2.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-2.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-1:3.3.2-1.5.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-1:3.3.2-1.5.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.3.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-annotations-javadoc-0:3.4.0-3.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-commons-annotations-javadoc-0:3.1.0-1.8.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-javadoc-1:1.0.2-3.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-entitymanager-javadoc-0:3.4.0-4.3.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:hibernate3-javadoc-1:3.3.2-1.5.GA_CP04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-util-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-util-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-util-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-apr-util-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-debuginfo-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-debuginfo-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-devel-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-devel-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-manual-0:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:httpd22-manual-0:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-collections-tomcat5-0:3.2.1-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-debuginfo-1:1.0.5-1.4.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-debuginfo-1:1.0.5-1.4.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-dbcp-tomcat5-0:1.2.1-16.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-el-0:1.0-19.2.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-el-0:1.0-19.2.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.1.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.1.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-launcher-0:1.1-4.6.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-launcher-0:1.1-4.6.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-logging-tomcat6-0:1.1.1-0.4.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-modeler-0:2.0-4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-modeler-0:2.0-4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-pool-tomcat5-0:1.3-11.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-javaee-0:5.0.1-2.9.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-javaee-poms-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-jms-1.1-api-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jboss-transaction-1.0.1-api-0:5.0.1-2.9.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:log4j-0:1.2.14-18.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:log4j-0:1.2.14-18.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-0:1.0.10-2.GA_CP01.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-demo-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-jbossas-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-jbossweb2-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.GA_CP01.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-native-debuginfo-0:1.0.10-2.GA_CP01.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-native-debuginfo-0:1.0.10-2.GA_CP01.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_cluster-tomcat6-0:1.0.10-2.GA_CP01.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-0:1.2.31-1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-debuginfo-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-debuginfo-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_ssl22-1:2.2.17-14.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mod_ssl22-1:2.2.17-14.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mx4j-1:3.0.1-9.3.4.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:mx4j-1:3.0.1-9.3.4.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:regexp-0:1.5-1.2.1.jdk6.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:regexp-0:1.5-1.2.1.jdk6.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:struts12-0:1.2.9-3.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:struts12-0:1.2.9-3.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.0.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-native-debuginfo-0:1.1.20-2.0.ep5.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat-native-debuginfo-0:1.1.20-2.0.ep5.el4.x86_64	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-0:5.5.33-14_patch_04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-jasper-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-parent-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat5-webapps-0:5.5.33-14_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-0:6.0.32-15_patch_03.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-lib-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-log4j-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:tomcat6-webapps-0:6.0.32-15_patch_03.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xml-commons-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xml-commons-1:1.3.04-7.12.ep5.el4.src	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xml-commons-jaxp-1.2-apis-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xml-commons-jaxp-1.3-apis-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 4ES-JBEWS-5.0.0:xml-commons-resolver12-1:1.3.04-7.12.ep5.el4.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-0:1.7.1-13.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-antlr-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-bcel-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-bsf-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-log4j-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-oro-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-regexp-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-apache-resolver-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-commons-logging-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-javamail-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-jdepend-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-jmf-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-jsch-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-junit-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-nodeps-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-scripts-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-swing-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ant-trax-0:1.7.1-13.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:antlr-0:2.7.7-7.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:cglib-0:2.2-5.1.1.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:cglib-0:2.2-5.1.1.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:dom4j-0:1.6.1-11.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ecj3-1:3.3.1.1-3.1.1.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:ecj3-1:3.3.1.1-3.1.1.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-3.1.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:glassfish-jsf-0:1.2_13-3.1.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-1:3.3.2-1.4.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-1:3.3.2-1.4.GA_CP04.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.2.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-annotations-0:3.4.0-3.2.GA_CP04.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-annotations-javadoc-0:3.4.0-3.2.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-commons-annotations-javadoc-0:3.1.0-1.8.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-ejb-persistence-3.0-api-javadoc-1:1.0.2-3.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-entitymanager-0:3.4.0-4.3.GA_CP04.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-entitymanager-javadoc-0:3.4.0-4.3.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:hibernate3-javadoc-1:3.3.2-1.4.GA_CP04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-0:2.2.17-11.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-0:2.2.17-11.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-0:2.2.17-11.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-devel-0:2.2.17-11.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-devel-0:2.2.17-11.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-manual-0:2.2.17-11.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:httpd-manual-0:2.2.17-11.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-beanutils-0:1.8.0-4.1.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-chain-0:1.2-2.2.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.2.1.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-codec-0:1.3-9.2.1.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-collections-0:3.2.1-4.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-collections-tomcat5-0:3.2.1-4.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-daemon-1:1.0.5-1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-dbcp-0:1.2.1-16.4.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-dbcp-tomcat5-0:1.2.1-16.4.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-digester-0:1.8.1-8.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-fileupload-1:1.1.1-7.4.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-httpclient-1:3.1-1.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-io-0:1.4-1.3.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-logging-0:1.1.1-0.4.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-logging-jboss-0:1.1-10.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-logging-tomcat6-0:1.1.1-0.4.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-pool-0:1.3-11.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-pool-tomcat5-0:1.3-11.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-oro-0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jakarta-taglibs-standard-0:1.1.1-9.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:javassist-0:3.12.0-1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-core-0:2.2.17-1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-logging-jdk-0:2.1.2-1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-common-logging-spi-0:2.1.2-1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-javaee-0:5.0.1-2.9.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-javaee-0:5.0.1-2.9.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-javaee-poms-0:5.0.1-2.9.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-jms-1.1-api-0:5.0.1-2.9.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jboss-transaction-1.0.1-api-0:5.0.1-2.9.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jcommon-0:1.0.16-1.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:jfreechart-0:1.0.13-2.3.2.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-0:1.0.10-2.1.GA_CP01.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-demo-0:1.0.10-2.1.GA_CP01.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-jbossas-0:1.0.10-2.1.GA_CP01.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-jbossweb2-0:1.0.10-2.1.GA_CP01.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.1.GA_CP01.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.1.GA_CP01.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-native-0:1.0.10-2.1.GA_CP01.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_cluster-tomcat6-0:1.0.10-2.1.GA_CP01.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_jk-0:1.2.31-1.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_jk-ap20-0:1.2.31-1.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_jk-manual-0:1.2.31-1.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_ssl-1:2.2.17-11.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:mod_ssl-1:2.2.17-11.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:objectweb-asm-0:3.1-5.3.1.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:struts12-0:1.2.9-3.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:struts12-0:1.2.9-3.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat-jkstatus-ant-0:1.2.31-2.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.1.ep5.el5.i386	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat-native-0:1.1.20-2.1.ep5.el5.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-0:5.5.33-16_patch_04.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-admin-webapps-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-common-lib-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-jasper-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-jasper-eclipse-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-jasper-javadoc-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-jsp-2.0-api-javadoc-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-parent-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-server-lib-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-servlet-2.4-api-javadoc-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat5-webapps-0:5.5.33-16_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-0:6.0.32-15.1_patch_03.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-admin-webapps-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-docs-webapp-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-el-1.0-api-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-javadoc-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-jsp-2.1-api-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-lib-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-log4j-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-servlet-2.5-api-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:tomcat6-webapps-0:6.0.32-15.1_patch_03.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xerces-j2-0:2.9.1-3.patch01.1.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xml-commons-0:1.3.04-7.10.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xml-commons-0:1.3.04-7.10.jdk6.ep5.el5.src	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xml-commons-jaxp-1.2-apis-0:1.3.04-7.10.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xml-commons-jaxp-1.3-apis-0:1.3.04-7.10.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 5Server-JBEWS-5.0.0:xml-commons-resolver12-0:1.3.04-7.10.jdk6.ep5.el5.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-0:1.7.1-14.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-antlr-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-bcel-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-bsf-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-log4j-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-oro-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-regexp-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-apache-resolver-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-commons-logging-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-commons-net-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-javamail-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-jdepend-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-jmf-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-jsch-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-junit-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-nodeps-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-scripts-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-swing-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ant-trax-0:1.7.1-14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:antlr-0:2.7.7-7.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:antlr-0:2.7.7-7.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:cglib-0:2.2-5.4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:cglib-0:2.2-5.4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:dom4j-0:1.6.1-11.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:dom4j-0:1.6.1-11.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ecj3-1:3.3.1.1-4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:ecj3-1:3.3.1.1-4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:glassfish-jsf-0:1.2_13-3.1.4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:glassfish-jsf-0:1.2_13-3.1.4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-1:3.3.2-1.8.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-1:3.3.2-1.8.GA_CP04.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-annotations-0:3.4.0-3.5.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-annotations-0:3.4.0-3.5.GA_CP04.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-annotations-javadoc-0:3.4.0-3.5.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-commons-annotations-0:3.1.0-1.8.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-commons-annotations-javadoc-0:3.1.0-1.8.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.3.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-ejb-persistence-3.0-api-1:1.0.2-3.3.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-ejb-persistence-3.0-api-javadoc-1:1.0.2-3.3.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-entitymanager-0:3.4.0-4.4.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-entitymanager-0:3.4.0-4.4.GA_CP04.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-entitymanager-javadoc-0:3.4.0-4.4.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:hibernate3-javadoc-1:3.3.2-1.8.GA_CP04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-0:2.2.17-11.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-0:2.2.17-11.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-0:2.2.17-11.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-devel-0:2.2.17-11.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-devel-0:2.2.17-11.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-manual-0:2.2.17-11.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-manual-0:2.2.17-11.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-tools-0:2.2.17-11.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:httpd-tools-0:2.2.17-11.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-beanutils-0:1.8.0-9.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-beanutils-0:1.8.0-9.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-chain-0:1.2-2.2.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-chain-0:1.2-2.2.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-codec-0:1.3-12.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-codec-0:1.3-12.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-collections-0:3.2.1-4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-collections-0:3.2.1-4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-collections-tomcat5-0:3.2.1-4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-daemon-1:1.0.5-1.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-daemon-1:1.0.5-1.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-daemon-jsvc-1:1.0.5-1.4.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-dbcp-0:1.2.1-16.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-dbcp-0:1.2.1-16.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-dbcp-tomcat5-0:1.2.1-16.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-digester-0:1.8.1-8.1.1.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-digester-0:1.8.1-8.1.1.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-fileupload-1:1.1.1-7.5.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-fileupload-1:1.1.1-7.5.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-httpclient-1:3.1-1.2.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-httpclient-1:3.1-1.2.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-io-0:1.4-4.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-io-0:1.4-4.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-logging-0:1.1.1-1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-logging-0:1.1.1-1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-logging-jboss-0:1.1-10.2.2.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-logging-jboss-0:1.1-10.2.2.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-logging-tomcat6-0:1.1.1-1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-pool-0:1.3-15.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-pool-0:1.3-15.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-pool-tomcat5-0:1.3-15.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-commons-validator-0:1.3.1-7.5.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-oro-0:2.0.8-7.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-oro-0:2.0.8-7.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-taglibs-standard-0:1.1.1-12.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jakarta-taglibs-standard-0:1.1.1-12.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:javassist-0:3.12.0-3.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:javassist-0:3.12.0-3.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-core-0:2.2.17-1.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-core-0:2.2.17-1.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-logging-jdk-0:2.1.2-1.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-logging-jdk-0:2.1.2-1.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-logging-spi-0:2.1.2-1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-common-logging-spi-0:2.1.2-1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-javaee-0:5.0.1-2.9.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-javaee-0:5.0.1-2.9.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-javaee-poms-0:5.0.1-2.9.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-jms-1.1-api-0:5.0.1-2.9.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jboss-transaction-1.0.1-api-0:5.0.1-2.9.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jcommon-0:1.0.16-1.2.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jcommon-0:1.0.16-1.2.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jfreechart-0:1.0.13-2.3.2.1.2.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:jfreechart-0:1.0.13-2.3.2.1.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-0:1.0.10-2.2.GA_CP01.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-demo-0:1.0.10-2.2.GA_CP01.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-jbossas-0:1.0.10-2.2.GA_CP01.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-jbossweb2-0:1.0.10-2.2.GA_CP01.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-native-0:1.0.10-2.1.1.GA_CP01.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-native-0:1.0.10-2.1.1.GA_CP01.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-native-0:1.0.10-2.1.1.GA_CP01.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_cluster-tomcat6-0:1.0.10-2.2.GA_CP01.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_jk-0:1.2.31-1.1.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_jk-ap20-0:1.2.31-1.1.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_jk-ap20-0:1.2.31-1.1.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_jk-manual-0:1.2.31-1.1.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_jk-manual-0:1.2.31-1.1.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_ssl-1:2.2.17-11.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:mod_ssl-1:2.2.17-11.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:objectweb-asm31-0:3.1-12.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:objectweb-asm31-0:3.1-12.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:struts12-0:1.2.9-3.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:struts12-0:1.2.9-3.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat-jkstatus-ant-0:1.2.31-2.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat-jkstatus-ant-0:1.2.31-2.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat-native-0:1.1.20-2.1.2.ep5.el6.i386	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat-native-0:1.1.20-2.1.2.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat-native-0:1.1.20-2.1.2.ep5.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-0:5.5.33-15_patch_04.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-admin-webapps-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-common-lib-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-jasper-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-jasper-eclipse-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-jasper-javadoc-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-jsp-2.0-api-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-jsp-2.0-api-javadoc-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-parent-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-server-lib-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-servlet-2.4-api-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-servlet-2.4-api-javadoc-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat5-webapps-0:5.5.33-15_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-0:6.0.32-14_patch_03.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-admin-webapps-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-docs-webapp-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-el-1.0-api-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-javadoc-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-jsp-2.1-api-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-lib-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-log4j-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-servlet-2.5-api-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:tomcat6-webapps-0:6.0.32-14_patch_03.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xalan-j2-0:2.7.1-5.3_patch_04.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xerces-j2-0:2.9.1-8.patch01.1.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xerces-j2-0:2.9.1-8.patch01.1.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-0:1.3.04-7.14.ep5.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-jaxp-1.1-apis-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-jaxp-1.2-apis-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-jaxp-1.3-apis-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-resolver10-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-resolver11-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-resolver12-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-which10-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-JBEWS-1:xml-commons-which11-0:1.3.04-7.14.ep5.el6.noarch	—	Vendor Fix fix

Threats

Impact Low

CVE-2010-1452

The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Low

CVE-2010-1623

Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Moderate

CVE-2010-3718

Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Moderate

CVE-2010-4172

Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Moderate

CVE-2011-0013

Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Moderate

CVE-2011-0419

Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Moderate

CVE-2012-4557

The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected products

Fixed 704 products, the same list as for CVE-2010-1157

Threats

Impact Low

References

46 references

URL	Category
https://access.redhat.com/errata/RHSA-2011:0897	self
https://access.redhat.com/security/updates/classi…	external
http://docs.redhat.com/docs/en-US/JBoss_Enterpris…	external
https://bugzilla.redhat.com/show_bug.cgi?id=585331	external
https://bugzilla.redhat.com/show_bug.cgi?id=618189	external
https://bugzilla.redhat.com/show_bug.cgi?id=640281	external
https://bugzilla.redhat.com/show_bug.cgi?id=656246	external
https://bugzilla.redhat.com/show_bug.cgi?id=675786	external
https://bugzilla.redhat.com/show_bug.cgi?id=675792	external
https://bugzilla.redhat.com/show_bug.cgi?id=677655	external
https://bugzilla.redhat.com/show_bug.cgi?id=677657	external
https://bugzilla.redhat.com/show_bug.cgi?id=677659	external
https://bugzilla.redhat.com/show_bug.cgi?id=703390	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2010-1157	self
https://bugzilla.redhat.com/show_bug.cgi?id=585331	external
https://www.cve.org/CVERecord?id=CVE-2010-1157	external
https://nvd.nist.gov/vuln/detail/CVE-2010-1157	external
https://access.redhat.com/security/cve/CVE-2010-1452	self
https://bugzilla.redhat.com/show_bug.cgi?id=618189	external
https://www.cve.org/CVERecord?id=CVE-2010-1452	external
https://nvd.nist.gov/vuln/detail/CVE-2010-1452	external
https://access.redhat.com/security/cve/CVE-2010-1623	self
https://bugzilla.redhat.com/show_bug.cgi?id=640281	external
https://www.cve.org/CVERecord?id=CVE-2010-1623	external
https://nvd.nist.gov/vuln/detail/CVE-2010-1623	external
https://access.redhat.com/security/cve/CVE-2010-3718	self
https://bugzilla.redhat.com/show_bug.cgi?id=675792	external
https://www.cve.org/CVERecord?id=CVE-2010-3718	external
https://nvd.nist.gov/vuln/detail/CVE-2010-3718	external
https://access.redhat.com/security/cve/CVE-2010-4172	self
https://bugzilla.redhat.com/show_bug.cgi?id=656246	external
https://www.cve.org/CVERecord?id=CVE-2010-4172	external
https://nvd.nist.gov/vuln/detail/CVE-2010-4172	external
https://access.redhat.com/security/cve/CVE-2011-0013	self
https://bugzilla.redhat.com/show_bug.cgi?id=675786	external
https://www.cve.org/CVERecord?id=CVE-2011-0013	external
https://nvd.nist.gov/vuln/detail/CVE-2011-0013	external
https://access.redhat.com/security/cve/CVE-2011-0419	self
https://bugzilla.redhat.com/show_bug.cgi?id=703390	external
https://www.cve.org/CVERecord?id=CVE-2011-0419	external
https://nvd.nist.gov/vuln/detail/CVE-2011-0419	external
https://access.redhat.com/security/cve/CVE-2012-4557	self
https://bugzilla.redhat.com/show_bug.cgi?id=871685	external
https://www.cve.org/CVERecord?id=CVE-2012-4557	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4557	external

Acknowledgments

Maksymilian Arciemowicz

JSON

To clipboard

Loading 1.9 MB of JSON…

CVE-2010-1157 (GCVE-0-2010-1157)

Vulnerability from cvelistv5 – Published: 2010-04-23 14:00 – Updated: 2024-08-07 01:14

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

32 references

URL	Tags
http://www.securityfocus.com/archive/1/510879/100…	mailing-listx_refsource_BUGTRAQ
http://www.debian.org/security/2011/dsa-2207	vendor-advisoryx_refsource_DEBIAN
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisoryx_refsource_HP
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2010/3056	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/43310	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/39574	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=133469267822771&w=2	vendor-advisoryx_refsource_HP
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/42368	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2010/0980	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
http://secunia.com/advisories/57126	third-party-advisoryx_refsource_SECUNIA
http://www.vmware.com/support/vsphere4/doc/vsp_vc…	x_refsource_CONFIRM
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/39635	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://tomcat.apache.org/security-5.html	x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=129070310906557&w=2	vendor-advisoryx_refsource_HP
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/516397/100…	mailing-listx_refsource_BUGTRAQ
http://marc.info/?l=bugtraq&m=139344343412337&w=2	vendor-advisoryx_refsource_HP
https://lists.apache.org/thread.html/06cfb634bc7b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8dcaf7c3894d…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r584a714f141…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r3aacc40356d…	mailing-listx_refsource_MLIST

Date Public

2010-04-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20100421 [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/510879/100/0/threaded"
          },
          {
            "name": "DSA-2207",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2207"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=936540"
          },
          {
            "name": "HPSBUX02860",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "name": "MDVSA-2010:177",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:177"
          },
          {
            "name": "ADV-2010-3056",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3056"
          },
          {
            "name": "43310",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43310"
          },
          {
            "name": "39574",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39574"
          },
          {
            "name": "HPSBOV02762",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "MDVSA-2010:176",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176"
          },
          {
            "name": "42368",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42368"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "name": "ADV-2010-0980",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0980"
          },
          {
            "name": "oval:org.mitre.oval:def:19492",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19492"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "57126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57126"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=936541"
          },
          {
            "name": "SUSE-SR:2010:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"
          },
          {
            "name": "SSRT100825",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2"
          },
          {
            "name": "39635",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/39635"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-5.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0003.html"
          },
          {
            "name": "HPSBUX02579",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=129070310906557\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "name": "SSRT101146",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "name": "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/516397/100/0/threaded"
          },
          {
            "name": "SSRT100203",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=129070310906557\u0026w=2"
          },
          {
            "name": "HPSBST02955",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-04-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server\u0027s hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:08:57.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20100421 [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/510879/100/0/threaded"
        },
        {
          "name": "DSA-2207",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2207"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=936540"
        },
        {
          "name": "HPSBUX02860",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "name": "MDVSA-2010:177",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:177"
        },
        {
          "name": "ADV-2010-3056",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3056"
        },
        {
          "name": "43310",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43310"
        },
        {
          "name": "39574",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39574"
        },
        {
          "name": "HPSBOV02762",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "MDVSA-2010:176",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:176"
        },
        {
          "name": "42368",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42368"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "name": "ADV-2010-0980",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0980"
        },
        {
          "name": "oval:org.mitre.oval:def:19492",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19492"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "57126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57126"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=936541"
        },
        {
          "name": "SUSE-SR:2010:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html"
        },
        {
          "name": "SSRT100825",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2"
        },
        {
          "name": "39635",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/39635"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-5.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0003.html"
        },
        {
          "name": "HPSBUX02579",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=129070310906557\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "name": "SSRT101146",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "name": "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/516397/100/0/threaded"
        },
        {
          "name": "SSRT100203",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=129070310906557\u0026w=2"
        },
        {
          "name": "HPSBST02955",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-1157",
    "datePublished": "2010-04-23T14:00:00.000Z",
    "dateReserved": "2010-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T01:14:06.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-1452 (GCVE-0-2010-1452)

Vulnerability from cvelistv5 – Published: 2010-07-28 19:32 – Updated: 2024-08-07 01:21

Summary

The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

42 references

URL	Tags
https://issues.apache.org/bugzilla/show_bug.cgi?i…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0291	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/3064	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.redhat.com/support/errata/RHSA-2010-06…	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=apache-announce&m=12800971861…	mailing-listx_refsource_MLIST
http://marc.info/?l=bugtraq&m=133355494609819&w=2	vendor-advisoryx_refsource_HP
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://marc.info/?l=bugtraq&m=129190899612998&w=2	vendor-advisoryx_refsource_HP
http://httpd.apache.org/security/vulnerabilities_…	x_refsource_CONFIRM
http://blogs.sun.com/security/entry/cve_2010_1452…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/42367	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://slackware.com/security/viewer.php?l=slackw…	vendor-advisoryx_refsource_SLACKWARE
http://ubuntu.com/usn/usn-1021-1	vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2010/2218	vdb-entryx_refsource_VUPEN
http://support.apple.com/kb/HT4581	x_refsource_CONFIRM
https://lists.apache.org/thread.html/54a42d4b0196…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/5df9bfb86a3b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8d63cb8e9100…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f7f95ac1cd98…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r57608dc51b7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r0276683d8e1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r8828e649175…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rfbaf647d52c…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9ea3538f229…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r688df6f16f1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r2cb985de917…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9e862225418…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/re2e23465bbd…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rad2acee3ab8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rdca61ae9906…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r8c9983f1172…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r5f9c22f9c28…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rb9c9f42dafa…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r75cbe9ea3e2…	mailing-listx_refsource_MLIST

Date Public

2010-07-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:21:19.170Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49246"
          },
          {
            "name": "ADV-2011-0291",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0291"
          },
          {
            "name": "ADV-2010-3064",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3064"
          },
          {
            "name": "oval:org.mitre.oval:def:12341",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341"
          },
          {
            "name": "APPLE-SA-2011-03-21-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
          },
          {
            "name": "RHSA-2010:0659",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0659.html"
          },
          {
            "name": "[apache-announce] 20100725 [ANNOUNCEMENT] Apache HTTP Server 2.2.16 Released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=apache-announce\u0026m=128009718610929\u0026w=2"
          },
          {
            "name": "SSRT100782",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133355494609819\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:11683",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683"
          },
          {
            "name": "HPSBUX02612",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
          },
          {
            "name": "HPSBMU02753",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133355494609819\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://httpd.apache.org/security/vulnerabilities_22.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "name": "42367",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42367"
          },
          {
            "name": "SUSE-SU-2011:1216",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html"
          },
          {
            "name": "SSRT100345",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
          },
          {
            "name": "SUSE-SU-2011:1000",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html"
          },
          {
            "name": "SSA:2010-240-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.467395"
          },
          {
            "name": "USN-1021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-1021-1"
          },
          {
            "name": "ADV-2010-2218",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2218"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4581"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210422 svn commit: r1074079 [2/3] - in /websites/staging/httpd/trunk/content: ./ apreq/ contribute/ contributors/ dev/ docs-project/ docs/ info/ mod_fcgid/ mod_ftp/ mod_mbox/ mod_smtpd/ modules/ security/ test/ test/flood/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-07-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-06T10:09:14.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=49246"
        },
        {
          "name": "ADV-2011-0291",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0291"
        },
        {
          "name": "ADV-2010-3064",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3064"
        },
        {
          "name": "oval:org.mitre.oval:def:12341",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341"
        },
        {
          "name": "APPLE-SA-2011-03-21-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
        },
        {
          "name": "RHSA-2010:0659",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0659.html"
        },
        {
          "name": "[apache-announce] 20100725 [ANNOUNCEMENT] Apache HTTP Server 2.2.16 Released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=apache-announce\u0026m=128009718610929\u0026w=2"
        },
        {
          "name": "SSRT100782",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133355494609819\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:11683",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683"
        },
        {
          "name": "HPSBUX02612",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
        },
        {
          "name": "HPSBMU02753",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133355494609819\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://httpd.apache.org/security/vulnerabilities_22.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "name": "42367",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42367"
        },
        {
          "name": "SUSE-SU-2011:1216",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html"
        },
        {
          "name": "SSRT100345",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=129190899612998\u0026w=2"
        },
        {
          "name": "SUSE-SU-2011:1000",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html"
        },
        {
          "name": "SSA:2010-240-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2010\u0026m=slackware-security.467395"
        },
        {
          "name": "USN-1021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-1021-1"
        },
        {
          "name": "ADV-2010-2218",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2218"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4581"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210422 svn commit: r1074079 [2/3] - in /websites/staging/httpd/trunk/content: ./ apreq/ contribute/ contributors/ dev/ docs-project/ docs/ info/ mod_fcgid/ mod_ftp/ mod_mbox/ mod_smtpd/ modules/ security/ test/ test/flood/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-1452",
    "datePublished": "2010-07-28T19:32:00.000Z",
    "dateReserved": "2010-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T01:21:19.170Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-1623 (GCVE-0-2010-1623)

Vulnerability from cvelistv5 – Published: 2010-10-04 20:00 – Updated: 2024-08-07 01:28

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

59 references

URL	Tags
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://secunia.com/advisories/43285	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/3065	vdb-entryx_refsource_VUPEN
http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/3064	vdb-entryx_refsource_VUPEN
http://slackware.com/security/viewer.php?l=slackw…	vendor-advisoryx_refsource_SLACKWARE
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://security-tracker.debian.org/tracker/CVE-20…	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.vupen.com/english/advisories/2010/2806	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/41701	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1022-1	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2010-09…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/42361	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	vendor-advisoryx_refsource_AIXAPAR
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2010/2556	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/42403	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/43673	vdb-entryx_refsource_BID
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/42367	third-party-advisoryx_refsource_SECUNIA
http://blogs.sun.com/security/entry/cve_2010_1623…	x_refsource_CONFIRM
http://secunia.com/advisories/43211	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/42015	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/42537	third-party-advisoryx_refsource_SECUNIA
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=130168502603566&w=2	vendor-advisoryx_refsource_HP
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2010/2557	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2010/3074	vdb-entryx_refsource_VUPEN
http://ubuntu.com/usn/usn-1021-1	vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2011/0358	vdb-entryx_refsource_VUPEN
https://lists.apache.org/thread.html/54a42d4b0196…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/5df9bfb86a3b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8d63cb8e9100…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f7f95ac1cd98…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r57608dc51b7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r0276683d8e1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r8828e649175…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rfbaf647d52c…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9ea3538f229…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r688df6f16f1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r2cb985de917…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9e862225418…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/re2e23465bbd…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rad2acee3ab8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rdca61ae9906…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rad01d817195…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r5f9c22f9c28…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r476d175be0a…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rb9c9f42dafa…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r75cbe9ea3e2…	mailing-listx_refsource_MLIST

Date Public

2010-10-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:28:43.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003494"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003492"
          },
          {
            "name": "43285",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43285"
          },
          {
            "name": "ADV-2010-3065",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3"
          },
          {
            "name": "ADV-2010-3064",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3064"
          },
          {
            "name": "SSA:2011-041-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.627828"
          },
          {
            "name": "FEDORA-2010-15953",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049885.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://security-tracker.debian.org/tracker/CVE-2010-1623"
          },
          {
            "name": "FEDORA-2010-15916",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.html"
          },
          {
            "name": "ADV-2010-2806",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2806"
          },
          {
            "name": "41701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41701"
          },
          {
            "name": "USN-1022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1022-1"
          },
          {
            "name": "RHSA-2010:0950",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0950.html"
          },
          {
            "name": "42361",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42361"
          },
          {
            "name": "oval:org.mitre.oval:def:12800",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12800"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003626"
          },
          {
            "name": "PM23263",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "name": "ADV-2010-2556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2556"
          },
          {
            "name": "42403",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42403"
          },
          {
            "name": "43673",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/43673"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003495"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "name": "42367",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42367"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.sun.com/security/entry/cve_2010_1623_memory_leak"
          },
          {
            "name": "43211",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43211"
          },
          {
            "name": "42015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42015"
          },
          {
            "name": "42537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42537"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003493"
          },
          {
            "name": "HPSBUX02645",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
          },
          {
            "name": "SUSE-SU-2011:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html"
          },
          {
            "name": "MDVSA-2010:192",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:192"
          },
          {
            "name": "ADV-2010-2557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2557"
          },
          {
            "name": "ADV-2010-3074",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3074"
          },
          {
            "name": "PM31601",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601"
          },
          {
            "name": "USN-1021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-1021-1"
          },
          {
            "name": "ADV-2011-0358",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0358"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-10-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-06T10:09:38.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003494"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003492"
        },
        {
          "name": "43285",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43285"
        },
        {
          "name": "ADV-2010-3065",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3"
        },
        {
          "name": "ADV-2010-3064",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3064"
        },
        {
          "name": "SSA:2011-041-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2011\u0026m=slackware-security.627828"
        },
        {
          "name": "FEDORA-2010-15953",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049885.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://security-tracker.debian.org/tracker/CVE-2010-1623"
        },
        {
          "name": "FEDORA-2010-15916",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.html"
        },
        {
          "name": "ADV-2010-2806",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2806"
        },
        {
          "name": "41701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41701"
        },
        {
          "name": "USN-1022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1022-1"
        },
        {
          "name": "RHSA-2010:0950",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0950.html"
        },
        {
          "name": "42361",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42361"
        },
        {
          "name": "oval:org.mitre.oval:def:12800",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12800"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003626"
        },
        {
          "name": "PM23263",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "name": "ADV-2010-2556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2556"
        },
        {
          "name": "42403",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42403"
        },
        {
          "name": "43673",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/43673"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003495"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "name": "42367",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42367"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.sun.com/security/entry/cve_2010_1623_memory_leak"
        },
        {
          "name": "43211",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43211"
        },
        {
          "name": "42015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42015"
        },
        {
          "name": "42537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42537"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1003493"
        },
        {
          "name": "HPSBUX02645",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
        },
        {
          "name": "SUSE-SU-2011:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html"
        },
        {
          "name": "MDVSA-2010:192",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:192"
        },
        {
          "name": "ADV-2010-2557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2557"
        },
        {
          "name": "ADV-2010-3074",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3074"
        },
        {
          "name": "PM31601",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601"
        },
        {
          "name": "USN-1021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-1021-1"
        },
        {
          "name": "ADV-2011-0358",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0358"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-1623",
    "datePublished": "2010-10-04T20:00:00.000Z",
    "dateReserved": "2010-04-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T01:28:43.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-3718 (GCVE-0-2010-3718)

Vulnerability from cvelistv5 – Published: 2011-02-10 17:00 – Updated: 2024-08-07 03:18

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

32 references

URL	Tags
http://www.securityfocus.com/bid/46177	vdb-entryx_refsource_BID
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/archive/1/516211/100…	mailing-listx_refsource_BUGTRAQ
http://securityreason.com/securityalert/8072	third-party-advisoryx_refsource_SREASON
http://tomcat.apache.org/security-6.html	x_refsource_MISC
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisoryx_refsource_HP
http://secunia.com/advisories/45022	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-18…	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=132215163318824&w=2	vendor-advisoryx_refsource_HP
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/57126	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/43192	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2011/dsa-2160	vendor-advisoryx_refsource_DEBIAN
http://www.securitytracker.com/id?1025025	vdb-entryx_refsource_SECTRACK
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://tomcat.apache.org/security-5.html	x_refsource_MISC
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://marc.info/?l=bugtraq&m=130168502603566&w=2	vendor-advisoryx_refsource_HP
http://marc.info/?l=bugtraq&m=139344343412337&w=2	vendor-advisoryx_refsource_HP
http://support.novell.com/docs/Readmes/InfoDocume…	x_refsource_CONFIRM
http://tomcat.apache.org/security-7.html	x_refsource_MISC
https://lists.apache.org/thread.html/06cfb634bc7b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8dcaf7c3894d…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r584a714f141…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r3aacc40356d…	mailing-listx_refsource_MLIST

Date Public

2011-02-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:18:53.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "46177",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46177"
          },
          {
            "name": "oval:org.mitre.oval:def:13969",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969"
          },
          {
            "name": "20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/516211/100/0/threaded"
          },
          {
            "name": "8072",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8072"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "HPSBUX02860",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "name": "45022",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45022"
          },
          {
            "name": "RHSA-2011:1845",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1845.html"
          },
          {
            "name": "SUSE-SR:2011:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "name": "SSRT100627",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
          },
          {
            "name": "tomcat-servletcontect-sec-bypass(65159)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65159"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "MDVSA-2011:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:030"
          },
          {
            "name": "oval:org.mitre.oval:def:19379",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "name": "57126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57126"
          },
          {
            "name": "RHSA-2011:0791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
          },
          {
            "name": "43192",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43192"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "name": "DSA-2160",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2160"
          },
          {
            "name": "1025025",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025025"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "name": "HPSBUX02725",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
          },
          {
            "name": "SSRT101146",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-5.html"
          },
          {
            "name": "oval:org.mitre.oval:def:12517",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517"
          },
          {
            "name": "HPSBUX02645",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
          },
          {
            "name": "HPSBST02955",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-7.html"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:08:33.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "46177",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46177"
        },
        {
          "name": "oval:org.mitre.oval:def:13969",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969"
        },
        {
          "name": "20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/516211/100/0/threaded"
        },
        {
          "name": "8072",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8072"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "HPSBUX02860",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "name": "45022",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45022"
        },
        {
          "name": "RHSA-2011:1845",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1845.html"
        },
        {
          "name": "SUSE-SR:2011:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
        },
        {
          "name": "SSRT100627",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
        },
        {
          "name": "tomcat-servletcontect-sec-bypass(65159)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65159"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "MDVSA-2011:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:030"
        },
        {
          "name": "oval:org.mitre.oval:def:19379",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "name": "57126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57126"
        },
        {
          "name": "RHSA-2011:0791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
        },
        {
          "name": "43192",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43192"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "name": "DSA-2160",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2160"
        },
        {
          "name": "1025025",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025025"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "name": "HPSBUX02725",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
        },
        {
          "name": "SSRT101146",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://tomcat.apache.org/security-5.html"
        },
        {
          "name": "oval:org.mitre.oval:def:12517",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517"
        },
        {
          "name": "HPSBUX02645",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
        },
        {
          "name": "HPSBST02955",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://tomcat.apache.org/security-7.html"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-3718",
    "datePublished": "2011-02-10T17:00:00.000Z",
    "dateReserved": "2010-10-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T03:18:53.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2010-4172 (GCVE-0-2010-4172)

Vulnerability from cvelistv5 – Published: 2010-11-26 19:00 – Updated: 2024-08-07 03:34

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

24 references

URL	Tags
http://www.ubuntu.com/usn/USN-1048-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/42337	third-party-advisoryx_refsource_SECUNIA
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/514866/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/45022	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://tomcat.apache.org/security-7.html	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=656246	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/3047	vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://archives.neohapsis.com/archives/fulldisclo…	mailing-listx_refsource_FULLDISC
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://tomcat.apache.org/security-6.html	x_refsource_CONFIRM
http://secunia.com/advisories/57126	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-07…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2011/0203	vdb-entryx_refsource_VUPEN
http://securitytracker.com/id?1024764	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=139344343412337&w=2	vendor-advisoryx_refsource_HP
http://support.novell.com/docs/Readmes/InfoDocume…	x_refsource_CONFIRM
http://secunia.com/advisories/43019	third-party-advisoryx_refsource_SECUNIA
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/45015	vdb-entryx_refsource_BID

Date Public

2010-11-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:34:37.407Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-1048-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1048-1"
          },
          {
            "name": "42337",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42337"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1037778"
          },
          {
            "name": "20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/514866/100/0/threaded"
          },
          {
            "name": "45022",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45022"
          },
          {
            "name": "tomcat-sessionlist-xss(63422)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63422"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-7.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=656246"
          },
          {
            "name": "ADV-2010-3047",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3047"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html"
          },
          {
            "name": "57126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57126"
          },
          {
            "name": "RHSA-2011:0791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
          },
          {
            "name": "ADV-2011-0203",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0203"
          },
          {
            "name": "1024764",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1024764"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "name": "HPSBST02955",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
          },
          {
            "name": "43019",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43019"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1037779"
          },
          {
            "name": "45015",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45015"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-11-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-1048-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1048-1"
        },
        {
          "name": "42337",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42337"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1037778"
        },
        {
          "name": "20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/514866/100/0/threaded"
        },
        {
          "name": "45022",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45022"
        },
        {
          "name": "tomcat-sessionlist-xss(63422)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63422"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-7.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=656246"
        },
        {
          "name": "ADV-2010-3047",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3047"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html"
        },
        {
          "name": "57126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57126"
        },
        {
          "name": "RHSA-2011:0791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
        },
        {
          "name": "ADV-2011-0203",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0203"
        },
        {
          "name": "1024764",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1024764"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "name": "HPSBST02955",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
        },
        {
          "name": "43019",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43019"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1037779"
        },
        {
          "name": "45015",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45015"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-4172",
    "datePublished": "2010-11-26T19:00:00.000Z",
    "dateReserved": "2010-11-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T03:34:37.407Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-0013 (GCVE-0-2011-0013)

Vulnerability from cvelistv5 – Published: 2011-02-18 23:00 – Updated: 2024-08-06 21:36

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

33 references

URL	Tags
http://marc.info/?l=bugtraq&m=136485229118404&w=2	vendor-advisoryx_refsource_HP
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.vupen.com/english/advisories/2011/0376	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/45022	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-18…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/46174	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=bugtraq&m=132215163318824&w=2	vendor-advisoryx_refsource_HP
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/516209/30/…	mailing-listx_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/57126	third-party-advisoryx_refsource_SECUNIA
http://tomcat.apache.org/security-5.html#Fixed_in…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-07…	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://bugzilla.redhat.com/show_bug.cgi?id=675786	x_refsource_MISC
http://secunia.com/advisories/43192	third-party-advisoryx_refsource_SECUNIA
http://tomcat.apache.org/security-7.html#Fixed_in…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1025026	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2011/dsa-2160	vendor-advisoryx_refsource_DEBIAN
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://securityreason.com/securityalert/8093	third-party-advisoryx_refsource_SREASON
http://tomcat.apache.org/security-6.html#Fixed_in…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=130168502603566&w=2	vendor-advisoryx_refsource_HP
http://marc.info/?l=bugtraq&m=139344343412337&w=2	vendor-advisoryx_refsource_HP
http://support.novell.com/docs/Readmes/InfoDocume…	x_refsource_CONFIRM
https://lists.apache.org/thread.html/06cfb634bc7b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8dcaf7c3894d…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r584a714f141…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r3aacc40356d…	mailing-listx_refsource_MLIST

Date Public

2011-01-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:36:02.212Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBUX02860",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:12878",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878"
          },
          {
            "name": "ADV-2011-0376",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0376"
          },
          {
            "name": "oval:org.mitre.oval:def:19269",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19269"
          },
          {
            "name": "45022",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45022"
          },
          {
            "name": "RHSA-2011:1845",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1845.html"
          },
          {
            "name": "46174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46174"
          },
          {
            "name": "SUSE-SR:2011:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
          },
          {
            "name": "SSRT100627",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "MDVSA-2011:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:030"
          },
          {
            "name": "20110205 [SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/516209/30/90/threaded"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "name": "57126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57126"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.32"
          },
          {
            "name": "RHSA-2011:0791",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
          },
          {
            "name": "oval:org.mitre.oval:def:14945",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14945"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=675786"
          },
          {
            "name": "43192",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29"
          },
          {
            "name": "1025026",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025026"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "name": "DSA-2160",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2160"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "name": "HPSBUX02725",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
          },
          {
            "name": "SSRT101146",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
          },
          {
            "name": "8093",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8093"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.30"
          },
          {
            "name": "HPSBUX02645",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
          },
          {
            "name": "HPSBST02955",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-01-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-13T16:08:53.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBUX02860",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:12878",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878"
        },
        {
          "name": "ADV-2011-0376",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0376"
        },
        {
          "name": "oval:org.mitre.oval:def:19269",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19269"
        },
        {
          "name": "45022",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45022"
        },
        {
          "name": "RHSA-2011:1845",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1845.html"
        },
        {
          "name": "46174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46174"
        },
        {
          "name": "SUSE-SR:2011:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html"
        },
        {
          "name": "SSRT100627",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "MDVSA-2011:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:030"
        },
        {
          "name": "20110205 [SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/516209/30/90/threaded"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "name": "57126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57126"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.32"
        },
        {
          "name": "RHSA-2011:0791",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0791.html"
        },
        {
          "name": "oval:org.mitre.oval:def:14945",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14945"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=675786"
        },
        {
          "name": "43192",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29"
        },
        {
          "name": "1025026",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025026"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "name": "DSA-2160",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2160"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "name": "HPSBUX02725",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2"
        },
        {
          "name": "SSRT101146",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2"
        },
        {
          "name": "8093",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8093"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.30"
        },
        {
          "name": "HPSBUX02645",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=130168502603566\u0026w=2"
        },
        {
          "name": "HPSBST02955",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html"
        },
        {
          "name": "[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E"
        },
        {
          "name": "[tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-0013",
    "datePublished": "2011-02-18T23:00:00.000Z",
    "dateReserved": "2010-12-07T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:36:02.212Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-0419 (GCVE-0-2011-0419)

Vulnerability from cvelistv5 – Published: 2011-05-16 17:00 – Updated: 2024-08-06 21:51

Summary

Severity

No CVSS data available.

CWE

Assigner

certcc mitre root

References

58 references

URL	Tags
http://secunia.com/advisories/44574	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=131731002122529&w=2	vendor-advisoryx_refsource_HP
http://marc.info/?l=bugtraq&m=134987041210674&w=2	vendor-advisoryx_refsource_HP
http://www.mail-archive.com/dev%40apr.apache.org/…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/48308	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/achievement_securityalert/98	third-party-advisoryx_refsource_SREASONRES
http://marc.info/?l=bugtraq&m=131551295528105&w=2	vendor-advisoryx_refsource_HP
http://marc.info/?l=bugtraq&m=132033751509019&w=2	vendor-advisoryx_refsource_HP
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/…	x_refsource_CONFIRM
http://cxib.net/stuff/apr_fnmatch.txts	x_refsource_MISC
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://securitytracker.com/id?1025527	vdb-entryx_refsource_SECTRACK
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://www.openbsd.org/cgi-bin/cvsweb/src/lib/lib…	x_refsource_CONFIRM
http://www.apache.org/dist/apr/CHANGES-APR-1.4	x_refsource_CONFIRM
http://www.apache.org/dist/apr/Announcement1.x.html	x_refsource_CONFIRM
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://httpd.apache.org/security/vulnerabilities_…	x_refsource_CONFIRM
http://svn.apache.org/viewvc/apr/apr/branches/1.4…	x_refsource_CONFIRM
http://securityreason.com/securityalert/8246	third-party-advisoryx_refsource_SREASON
http://www.debian.org/security/2011/dsa-2237	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=703390	x_refsource_CONFIRM
http://secunia.com/advisories/44564	third-party-advisoryx_refsource_SECUNIA
http://www.apache.org/dist/httpd/Announcement2.2.html	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/44490	third-party-advisoryx_refsource_SECUNIA
http://cxib.net/stuff/apache.fnmatch.phps	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2011-08…	vendor-advisoryx_refsource_REDHAT
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mail-archive.com/dev%40apr.apache.org/…	mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2011-05…	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mail-archive.com/dev%40apr.apache.org/…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/54a42d4b0196…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/5df9bfb86a3b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8d63cb8e9100…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f7f95ac1cd98…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r57608dc51b7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r0276683d8e1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r8828e649175…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rfbaf647d52c…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9ea3538f229…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r688df6f16f1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r2cb985de917…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9e862225418…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/re2e23465bbd…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r1d201e3da31…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rdca61ae9906…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r064df098577…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r75cbe9ea3e2…	mailing-listx_refsource_MLIST

Date Public

2011-01-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:51:08.865Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "44574",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44574"
          },
          {
            "name": "HPSBUX02707",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
          },
          {
            "name": "SSRT100966",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
          },
          {
            "name": "[dev] 20110511 Re: Apache Portable Runtime 1.4.4 [...] Released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23976.html"
          },
          {
            "name": "48308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48308"
          },
          {
            "name": "20110512 Multiple Vendors libc/fnmatch(3) DoS (incl apache)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/98"
          },
          {
            "name": "HPSBUX02702",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
          },
          {
            "name": "HPSBOV02822",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
          },
          {
            "name": "SSRT100619",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:14804",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cxib.net/stuff/apr_fnmatch.txts"
          },
          {
            "name": "oval:org.mitre.oval:def:14638",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638"
          },
          {
            "name": "1025527",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025527"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098188"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.apache.org/dist/apr/CHANGES-APR-1.4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.apache.org/dist/apr/Announcement1.x.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098799"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://httpd.apache.org/security/vulnerabilities_22.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029\u0026r2=1098902"
          },
          {
            "name": "8246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8246"
          },
          {
            "name": "DSA-2237",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2237"
          },
          {
            "name": "RHSA-2011:0897",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703390"
          },
          {
            "name": "44564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44564"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.apache.org/dist/httpd/Announcement2.2.html"
          },
          {
            "name": "SSRT100626",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
          },
          {
            "name": "44490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44490"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cxib.net/stuff/apache.fnmatch.phps"
          },
          {
            "name": "RHSA-2011:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "name": "MDVSA-2011:084",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:084"
          },
          {
            "name": "[dev] 20110510 Re: Apache Portable Runtime 1.4.4 [...] Released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23961.html"
          },
          {
            "name": "MDVSA-2013:150",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
          },
          {
            "name": "RHSA-2011:0507",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0507.html"
          },
          {
            "name": "SUSE-SU-2011:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html"
          },
          {
            "name": "HPSBMU02704",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
          },
          {
            "name": "SSRT100606",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
          },
          {
            "name": "[dev] 20110510 Re: fnmatch rewrite in apr, apr 1.4.3",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23960.html"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888222 - in /httpd/site/trunk/content/security/json: CVE-2010-2068.json CVE-2010-2791.json CVE-2011-0419.json CVE-2011-3368.json",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-01-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-06T10:10:16.000Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "44574",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44574"
        },
        {
          "name": "HPSBUX02707",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
        },
        {
          "name": "SSRT100966",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
        },
        {
          "name": "[dev] 20110511 Re: Apache Portable Runtime 1.4.4 [...] Released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23976.html"
        },
        {
          "name": "48308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48308"
        },
        {
          "name": "20110512 Multiple Vendors libc/fnmatch(3) DoS (incl apache)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/98"
        },
        {
          "name": "HPSBUX02702",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
        },
        {
          "name": "HPSBOV02822",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
        },
        {
          "name": "SSRT100619",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:14804",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cxib.net/stuff/apr_fnmatch.txts"
        },
        {
          "name": "oval:org.mitre.oval:def:14638",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638"
        },
        {
          "name": "1025527",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025527"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098188"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.apache.org/dist/apr/CHANGES-APR-1.4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.apache.org/dist/apr/Announcement1.x.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098799"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://httpd.apache.org/security/vulnerabilities_22.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029\u0026r2=1098902"
        },
        {
          "name": "8246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8246"
        },
        {
          "name": "DSA-2237",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2237"
        },
        {
          "name": "RHSA-2011:0897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703390"
        },
        {
          "name": "44564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44564"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.apache.org/dist/httpd/Announcement2.2.html"
        },
        {
          "name": "SSRT100626",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
        },
        {
          "name": "44490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44490"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cxib.net/stuff/apache.fnmatch.phps"
        },
        {
          "name": "RHSA-2011:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "name": "MDVSA-2011:084",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:084"
        },
        {
          "name": "[dev] 20110510 Re: Apache Portable Runtime 1.4.4 [...] Released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23961.html"
        },
        {
          "name": "MDVSA-2013:150",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
        },
        {
          "name": "RHSA-2011:0507",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-0507.html"
        },
        {
          "name": "SUSE-SU-2011:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html"
        },
        {
          "name": "HPSBMU02704",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
        },
        {
          "name": "SSRT100606",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
        },
        {
          "name": "[dev] 20110510 Re: fnmatch rewrite in apr, apr 1.4.3",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.mail-archive.com/dev%40apr.apache.org/msg23960.html"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1888222 - in /httpd/site/trunk/content/security/json: CVE-2010-2068.json CVE-2010-2791.json CVE-2011-0419.json CVE-2011-3368.json",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2011-0419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "44574",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44574"
            },
            {
              "name": "HPSBUX02707",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
            },
            {
              "name": "SSRT100966",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
            },
            {
              "name": "[dev] 20110511 Re: Apache Portable Runtime 1.4.4 [...] Released",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/dev@apr.apache.org/msg23976.html"
            },
            {
              "name": "48308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48308"
            },
            {
              "name": "20110512 Multiple Vendors libc/fnmatch(3) DoS (incl apache)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/98"
            },
            {
              "name": "HPSBUX02702",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
            },
            {
              "name": "HPSBOV02822",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=134987041210674\u0026w=2"
            },
            {
              "name": "SSRT100619",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:14804",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"
            },
            {
              "name": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22",
              "refsource": "CONFIRM",
              "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/fnmatch.c#rev1.22"
            },
            {
              "name": "http://cxib.net/stuff/apr_fnmatch.txts",
              "refsource": "MISC",
              "url": "http://cxib.net/stuff/apr_fnmatch.txts"
            },
            {
              "name": "oval:org.mitre.oval:def:14638",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638"
            },
            {
              "name": "1025527",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1025527"
            },
            {
              "name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098188",
              "refsource": "CONFIRM",
              "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098188"
            },
            {
              "name": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15",
              "refsource": "CONFIRM",
              "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fnmatch.c#rev1.15"
            },
            {
              "name": "http://www.apache.org/dist/apr/CHANGES-APR-1.4",
              "refsource": "CONFIRM",
              "url": "http://www.apache.org/dist/apr/CHANGES-APR-1.4"
            },
            {
              "name": "http://www.apache.org/dist/apr/Announcement1.x.html",
              "refsource": "CONFIRM",
              "url": "http://www.apache.org/dist/apr/Announcement1.x.html"
            },
            {
              "name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098799",
              "refsource": "CONFIRM",
              "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1098799"
            },
            {
              "name": "APPLE-SA-2011-10-12-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
            },
            {
              "name": "http://httpd.apache.org/security/vulnerabilities_22.html",
              "refsource": "CONFIRM",
              "url": "http://httpd.apache.org/security/vulnerabilities_22.html"
            },
            {
              "name": "http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029\u0026r2=1098902",
              "refsource": "CONFIRM",
              "url": "http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/strings/apr_fnmatch.c?r1=731029\u0026r2=1098902"
            },
            {
              "name": "8246",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8246"
            },
            {
              "name": "DSA-2237",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2237"
            },
            {
              "name": "RHSA-2011:0897",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0897.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=703390",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=703390"
            },
            {
              "name": "44564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44564"
            },
            {
              "name": "http://www.apache.org/dist/httpd/Announcement2.2.html",
              "refsource": "CONFIRM",
              "url": "http://www.apache.org/dist/httpd/Announcement2.2.html"
            },
            {
              "name": "SSRT100626",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=131731002122529\u0026w=2"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
            },
            {
              "name": "44490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44490"
            },
            {
              "name": "http://cxib.net/stuff/apache.fnmatch.phps",
              "refsource": "MISC",
              "url": "http://cxib.net/stuff/apache.fnmatch.phps"
            },
            {
              "name": "RHSA-2011:0896",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0896.html"
            },
            {
              "name": "http://support.apple.com/kb/HT5002",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5002"
            },
            {
              "name": "MDVSA-2011:084",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:084"
            },
            {
              "name": "[dev] 20110510 Re: Apache Portable Runtime 1.4.4 [...] Released",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/dev@apr.apache.org/msg23961.html"
            },
            {
              "name": "MDVSA-2013:150",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
            },
            {
              "name": "RHSA-2011:0507",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0507.html"
            },
            {
              "name": "SUSE-SU-2011:1229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html"
            },
            {
              "name": "HPSBMU02704",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=132033751509019\u0026w=2"
            },
            {
              "name": "SSRT100606",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=131551295528105\u0026w=2"
            },
            {
              "name": "[dev] 20110510 Re: fnmatch rewrite in apr, apr 1.4.3",
              "refsource": "MLIST",
              "url": "http://www.mail-archive.com/dev@apr.apache.org/msg23960.html"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1888194 [7/13] - /httpd/site/trunk/content/security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [7/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1888222 - in /httpd/site/trunk/content/security/json: CVE-2010-2068.json CVE-2010-2791.json CVE-2011-0419.json CVE-2011-3368.json",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2011-0419",
    "datePublished": "2011-05-16T17:00:00.000Z",
    "dateReserved": "2011-01-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:51:08.865Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-4557 (GCVE-0-2012-4557)

Vulnerability from cvelistv5 – Published: 2012-11-30 19:00 – Updated: 2024-08-06 20:42

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

23 references

URL	Tags
http://marc.info/?l=bugtraq&m=136612293908376&w=2	vendor-advisoryx_refsource_HP
http://www.debian.org/security/2012/dsa-2579	vendor-advisoryx_refsource_DEBIAN
http://svn.apache.org/viewvc?view=revision&revisi…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://httpd.apache.org/security/vulnerabilities_…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.opensuse.org/opensuse-updates/2013-0…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=871685	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2013-0…	vendor-advisoryx_refsource_SUSE
https://lists.apache.org/thread.html/8d63cb8e9100…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f7f95ac1cd98…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r57608dc51b7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rfbaf647d52c…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf6449464fd8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9ea3538f229…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9b4b963760a…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r05b5357d1f6…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9821b0a32a1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rdca61ae9906…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r9f93cf6dde3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rad01d817195…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r476d175be0a…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r75cbe9ea3e2…	mailing-listx_refsource_MLIST

Date Public

2012-01-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:42:54.760Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT101139",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
          },
          {
            "name": "DSA-2579",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2579"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1227298"
          },
          {
            "name": "oval:org.mitre.oval:def:18938",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18938"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://httpd.apache.org/security/vulnerabilities_22.html#2.2.22"
          },
          {
            "name": "oval:org.mitre.oval:def:19284",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19284"
          },
          {
            "name": "openSUSE-SU-2013:0248",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=871685"
          },
          {
            "name": "HPSBUX02866",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
          },
          {
            "name": "openSUSE-SU-2013:0243",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073139 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1888194 [8/13] - /httpd/site/trunk/content/security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-01-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-06T10:06:34.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSRT101139",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
        },
        {
          "name": "DSA-2579",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2579"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1227298"
        },
        {
          "name": "oval:org.mitre.oval:def:18938",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18938"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://httpd.apache.org/security/vulnerabilities_22.html#2.2.22"
        },
        {
          "name": "oval:org.mitre.oval:def:19284",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19284"
        },
        {
          "name": "openSUSE-SU-2013:0248",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=871685"
        },
        {
          "name": "HPSBUX02866",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
        },
        {
          "name": "openSUSE-SU-2013:0243",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073139 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1888194 [8/13] - /httpd/site/trunk/content/security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
        },
        {
          "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2012-4557",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT101139",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
            },
            {
              "name": "DSA-2579",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2579"
            },
            {
              "name": "http://svn.apache.org/viewvc?view=revision\u0026revision=1227298",
              "refsource": "CONFIRM",
              "url": "http://svn.apache.org/viewvc?view=revision\u0026revision=1227298"
            },
            {
              "name": "oval:org.mitre.oval:def:18938",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18938"
            },
            {
              "name": "http://httpd.apache.org/security/vulnerabilities_22.html#2.2.22",
              "refsource": "CONFIRM",
              "url": "http://httpd.apache.org/security/vulnerabilities_22.html#2.2.22"
            },
            {
              "name": "oval:org.mitre.oval:def:19284",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19284"
            },
            {
              "name": "openSUSE-SU-2013:0248",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00012.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=871685",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=871685"
            },
            {
              "name": "HPSBUX02866",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=136612293908376\u0026w=2"
            },
            {
              "name": "openSUSE-SU-2013:0243",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073139 [8/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1888194 [8/13] - /httpd/site/trunk/content/security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-4557",
    "datePublished": "2012-11-30T19:00:00.000Z",
    "dateReserved": "2012-08-21T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:42:54.760Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2011_0897

CVE-2010-1157 (GCVE-0-2010-1157)

CVE-2010-1452 (GCVE-0-2010-1452)

CVE-2010-1623 (GCVE-0-2010-1623)

CVE-2010-3718 (GCVE-0-2010-3718)

CVE-2010-4172 (GCVE-0-2010-4172)

CVE-2011-0013 (GCVE-0-2011-0013)

CVE-2011-0419 (GCVE-0-2011-0419)

CVE-2012-4557 (GCVE-0-2012-4557)

Tags

Sightings

Nomenclature

Related by attack behaviour