RHSA-2008:1007Low

Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Published
December 8, 2008
Last Modified
November 21, 2025

🔗 CVE IDs covered (5)

CVE-2008-1232 →CVE-2008-1947 →CVE-2008-2370 →CVE-2008-2938 →CVE-2008-3271 →

📋 Description

CVE-2008-1232 — tomcat: Cross-Site-Scripting enabled by sendError call CVE-2008-1947 — Tomcat host manager xss - name field CVE-2008-2370 — tomcat RequestDispatcher information disclosure vulnerability CVE-2008-2938 — tomcat Unicode directory traversal vulnerability CVE-2008-3271 — tomcat RemoteFilterValve Information disclosure

🎯 Affected products4

  • Red Hat Satellite 5.0 (RHEL v.4 AS)
  • Red Hat Satellite 5.1 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_12rh.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_12rh.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html

🔗 References (9)