JBoss Web Server is the web container, based on Apache Tomcat, in JBoss
Enterprise Application Platform. It provides a single deployment platform
for the JavaServer Pages (JSP) and Java Servlet technologies.
A denial of service flaw was found in the way certain strings were
converted to Double objects. A remote attacker could use this flaw to cause
JBoss Web Server to hang via a specially-crafted HTTP request.
(CVE-2010-4476)
Users of JBoss Web Server should upgrade to these updated packages, which
contain a backported patch to correct this issue. The JBoss server process
must be restarted for this update to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 5 | noarch | jbossweb-jsp-2.1-api | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-jsp-2.1-api-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
RedHat | 5 | src | jbossweb | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-2.1.10-5.patch01.1.1.ep5.el5.src.rpm |
RedHat | 5 | noarch | jbossweb-servlet-2.5-api | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-servlet-2.5-api-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
RedHat | 5 | noarch | jbossweb | <ย 2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 | jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el5.noarch.rpm |
RedHat | 5 | src | jbossweb | <ย 2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 | jbossweb-2.0.0-8.CP15.patch01.0jpp.ep1.1.el5.src.rpm |
RedHat | 5 | noarch | jbossweb-lib | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-lib-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |
RedHat | 5 | noarch | jbossweb | <ย 2.1.10-5.patch01.1.1.ep5.el5 | jbossweb-2.1.10-5.patch01.1.1.ep5.el5.noarch.rpm |