oval:org.mitre.oval:def:22721

Definition Id: oval:org.mitre.oval:def:22721

Oval ID:	oval:org.mitre.oval:def:22721
Title:	ELSA-2009:1164: tomcat security update (Important)
Description:	Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1164-01 CVE-2007-5333 CVE-2008-5515 CVE-2009-0033 CVE-2009-0580 CVE-2009-0781 CVE-2009-0783	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	tomcat5
Definition Synopsis:
Oracle Linux 5.x rpm test tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2 AND tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:22721