oval:org.mitre.oval:def:23491

Definition Id: oval:org.mitre.oval:def:23491

Oval ID:	oval:org.mitre.oval:def:23491
Title:	ELSA-2013:0640: tomcat5 security update (Important)
Description:	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0640-00 CVE-2012-3546 CVE-2012-5885 CVE-2012-5886 CVE-2012-5887	Version:	21
Platform(s):	Oracle Linux 5	Product(s):	tomcat5
Definition Synopsis:
Oracle Linux 5.x rpm test tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5 is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-jasper is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-server-lib is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-common-lib is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-webapps is earlier than 0:5.5.23-0jpp.38.el5_9 AND tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.38.el5_9

Definition Id: oval:org.mitre.oval:def:15459

Oval ID:	oval:org.mitre.oval:def:15459
Title:	Oracle Linux 5.x
Description:	The operating system installed on the system is Oracle Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:oracle:linux:5	Version:	7
Platform(s):	Oracle Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND Oracle Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:23491