tomcat5-5.5.23-0jpp.40.0.1.AXS3

エラータID: AXSA:2013-538:02

リリース日: 
2013/07/16 Tuesday - 10:55
題名: 
tomcat5-5.5.23-0jpp.40.0.1.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- JBoss Enterprise Web Server および Red Hat Enterprise Linux 用の Tomcat の RPM ディストリビューションで使用される (1) tomcat5、(2) tomcat6、および (3) tomcat7 の init スクリプトには、任意のファイルの所有権を変更される脆弱性が存在します。(CVE-2013-1976)

一部 CVE の翻訳文は JVN からの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2013-1976
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. tomcat5-5.5.23-0jpp.40.0.1.AXS3.src.rpm
    MD5: f03226eae1cfcee5de64dea5c97324d1
    SHA-256: ec9c5279760bc24b7cd7143dfeb82e416fa3729adbafabe54dfe220c5d448ee2
    Size: 4.75 MB

Asianux Server 3 for x86
  1. tomcat5-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: d9bf657e4f945c1009ce3c0c69024395
    SHA-256: 730c24c0d2340403499801f79ff0a80b51e2e41490702cbacf580b2ec2b03a19
    Size: 372.34 kB
  2. tomcat5-admin-webapps-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 80f496e61c7943f237f4bdbb3f6dfed0
    SHA-256: 2cf8d3099a09c6c1d642e268a40146d40de8110aa1e0cb66bef73aed7b6e2d45
    Size: 3.03 MB
  3. tomcat5-common-lib-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: c6bd9aad721e719ae1a034a2efacae9e
    SHA-256: c70c0afdfe5d26c0516867cf61f975eb9959641259b80ff61415bcaa24bf5e6a
    Size: 203.37 kB
  4. tomcat5-jasper-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 0bb7a0b415fdb69fdfe8ff4b61412cec
    SHA-256: 5e377ec892350c01eec31b8f7819bcdcf8dabf0af2d7b6915b12a57233f56caf
    Size: 0.96 MB
  5. tomcat5-jasper-javadoc-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 7318c070f7efd84a8ca0a5cb4d0a5884
    SHA-256: 5a6a562481cdcdf61895122d874e2384d9834b8e454a06d87615b478d1bddf24
    Size: 284.42 kB
  6. tomcat5-jsp-2.0-api-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 35c334fed5dd7e02f73a153997745322
    SHA-256: f4c8631ae639f2bdbf8847e2c32a80cf2d4c0fd59cd1e90bffe8c3781b915169
    Size: 99.94 kB
  7. tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 7888183459777a3149b433ad0257e164
    SHA-256: 68aeffcde981e1cdff8622131b2712a416fe07737b173fa703a1d621f8d20f3d
    Size: 152.35 kB
  8. tomcat5-server-lib-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 62da325a2b5c51dc2ba36559157f2af6
    SHA-256: 6ebca7156b09b026438cb340c4f17b1ff4e277840e7c698aae1736190d9e1f03
    Size: 3.57 MB
  9. tomcat5-servlet-2.4-api-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: fe6a1fe84fdd8be9549e899ddec729fa
    SHA-256: 747279b980e6deaf3a76b21cc28d6e89434b49d32d3bc52e684791cdd2697d35
    Size: 156.82 kB
  10. tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 5782a3c678eff44532a222b2fdab05aa
    SHA-256: e85fa8bba87c75be2ce8fa7ce10eb8daf9f8751d11082065a3be383481234429
    Size: 157.40 kB
  11. tomcat5-webapps-5.5.23-0jpp.40.0.1.AXS3.i386.rpm
    MD5: 74a7c13256db708d7a19377c546e8267
    SHA-256: a8fe53dd6b12366df9f013a6c554c13d5c57ba485954e76e9f04a905f300a303
    Size: 1.25 MB

Asianux Server 3 for x86_64
  1. tomcat5-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 7a782045482ec2da3fbbdf5a55e9da1a
    SHA-256: cddbd3b1d395a2f9313bc411d0971b5599827c1371a062de448d0c694b1bf0c0
    Size: 397.77 kB
  2. tomcat5-admin-webapps-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 7aefc9c81a3531267f88e9cc002c13b0
    SHA-256: c88cb9e630128772ae54282a8f3cbac38e9a020c1549245b457dca8d8f550cd9
    Size: 3.44 MB
  3. tomcat5-common-lib-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 712a34d9986458f3cd18d3956d1a8b7d
    SHA-256: 7c312e5d52a5b93d9dc1d2989cb03dd4a7736e87aa7aef8245fcd955e6f841ec
    Size: 227.70 kB
  4. tomcat5-jasper-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 3560b2d39096d43b05a5e7665ab1135f
    SHA-256: 5e928d0acb6b2225044518cbb6f68d41bb8a11222b4a9dc105bf5a23279d9d7f
    Size: 1.09 MB
  5. tomcat5-jasper-javadoc-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: bd5d6fd3ba89d0776f4b760a6dba489e
    SHA-256: 06eed12f389b1922e462b732d55aba43d8299c780e12a9c68778924d044b547b
    Size: 284.28 kB
  6. tomcat5-jsp-2.0-api-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: c167d493748566bd8ffe9115e9056522
    SHA-256: ed18f653e7494be89d7fc89a73fffabbddc06d9d0c937bfdedfc11619ca3a975
    Size: 106.25 kB
  7. tomcat5-jsp-2.0-api-javadoc-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: e1d24464254acf04223bdd988954773b
    SHA-256: 9ea70df8e7c4fe8f582fd0893b7033f5ba163f22804a5e8c38e7b5490254ca32
    Size: 152.20 kB
  8. tomcat5-server-lib-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 63ea94614a027f0c8fb1a87910d7943b
    SHA-256: 532b0a818ceb3d0f7becdccb17c68e3949561f85f6647876df06df3ecaae7bee
    Size: 4.05 MB
  9. tomcat5-servlet-2.4-api-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: e9f19b811c64ce0a885ce82c061209e5
    SHA-256: aacc96cf9a5671813d77ed7a287f1bb0217b504a85f57da04a27c7f224c67757
    Size: 166.16 kB
  10. tomcat5-servlet-2.4-api-javadoc-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: 45147a59b11a4bba0fccc0de23c6e4b6
    SHA-256: 9decd0d41e77d485b8c46b5c6ad26f4107f956ad33c5698d12f7774d55bff664
    Size: 157.29 kB
  11. tomcat5-webapps-5.5.23-0jpp.40.0.1.AXS3.x86_64.rpm
    MD5: e6d8c9ffe86441213670df487c0e63c3
    SHA-256: 15bbd2ac823907b8949ad77431d23e0d1cc2de6daf80d1bcfa4e1823e070a2ad
    Size: 1.25 MB