oval:org.mitre.oval:def:23095

Definition Id: oval:org.mitre.oval:def:23095

Oval ID:	oval:org.mitre.oval:def:23095
Title:	ELSA-2013:0269: axis security update (Moderate)
Description:	Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0269-02 CVE-2012-5784	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	axis
Definition Synopsis:
Oracle Linux 6.x rpm test axis is earlier than 0:1.2.1-7.3.el6_3 AND axis-manual is earlier than 0:1.2.1-7.3.el6_3 AND axis-javadoc is earlier than 0:1.2.1-7.3.el6_3

Definition Id: oval:org.mitre.oval:def:16594

Oval ID:	oval:org.mitre.oval:def:16594
Title:	Oracle Linux 6.x
Description:	The operating system installed on the system is Oracle Linux 6.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:6	Version:	5
Platform(s):	Oracle Linux 6	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:23095