Summary
The remote host is missing updates announced in
advisory GLSA 200804-10.
Solution
All Tomcat 5.5.x users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-servers/tomcat-5.5.26'
All Tomcat 6.0.x users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-servers/tomcat-6.0.16'
http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200804-10 http://bugs.gentoo.org/show_bug.cgi?id=196066
http://bugs.gentoo.org/show_bug.cgi?id=203169
Insight
Multiple vulnerabilities in Tomcat may lead to local file overwriting, session hijacking or information disclosure.
Severity
Classification
-
CVE CVE-2007-5333, CVE-2007-5342, CVE-2007-5461, CVE-2007-6286, CVE-2008-0002 -
CVSS Base Score: 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
Related Vulnerabilities