Fedora 7 : tomcat5-5.5.25-1jpp.1.fc7 (2007-3456)

This script is Copyright (C) 2007-2016 Tenable Network Security, Inc.


Synopsis :

The remote Fedora host is missing a security update.

Description :

Updated Tomcat5 packages that fix several security bugs are now
available for Fedora Core 7.

This update includes fixes to the following :

- CVE-2007-1355

- CVE-2007-3386

- CVE-2007-3385

- CVE-2007-3382

- CVE-2007-2450

- CVE-2007-2449

- CVE-2007-5461

- CVE-2007-1358

All users of tomcat are advised to update to these packages.

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

See also :

https://bugzilla.redhat.com/show_bug.cgi?id=244803
https://bugzilla.redhat.com/show_bug.cgi?id=244804
https://bugzilla.redhat.com/show_bug.cgi?id=244808
https://bugzilla.redhat.com/show_bug.cgi?id=244810
https://bugzilla.redhat.com/show_bug.cgi?id=247972
https://bugzilla.redhat.com/show_bug.cgi?id=247976
https://bugzilla.redhat.com/show_bug.cgi?id=247994
https://bugzilla.redhat.com/show_bug.cgi?id=253166
http://www.nessus.org/u?93b8a7ae

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)
CVSS Temporal Score : 3.6
(CVSS2#E:F/RL:OF/RC:C)
Public Exploit Available : true

Family: Fedora Local Security Checks

Nessus Plugin ID: 28257 (fedora_2007-3456.nasl)

Bugtraq ID: 24475
24476
24524
25316
26070

CVE ID: CVE-2007-1355
CVE-2007-1358
CVE-2007-2449
CVE-2007-2450
CVE-2007-3382
CVE-2007-3385
CVE-2007-3386
CVE-2007-5461

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now