CVE-2007-5342
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
6.4 Medium
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
Exploit likelihood
5.16%Down 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
- Record
CVE-2007-5342- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
- Record
CVE-2007-5342- Updated
- 2026-11-02
EUVDEUVD-2022-5507 No score
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
- Record
EUVD-2022-5507- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w65j-cmqc-37p2 No score
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
- Record
GHSA-w65j-cmqc-37p2- Weakness
- CWE-284
- Updated
- 2026-11-02
OSVGHSA-w65j-cmqc-37p2 No score
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
- Record
GHSA-w65j-cmqc-37p2- Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcat-juliMaven |
5.5.9 to 5.5.25 | None known |
org.apache.tomcat:tomcat-juliMaven |
6.0.0 to 6.0.15 | None known |
tomcat5.5Debian:4.0 From an advisory covering 5 CVEs |
before 5.5.20-2etch1, plus listed versions 5.5.20-2 |
5.5.20-2etch1 |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
Show 115 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5Red Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el4 | 0:1.4.0-0jpp.ep1.10.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.2.el4 | 0:2.1.4-1jpp.ep1.2.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.2.el4 | 0:2.1.4-1jpp.ep1.2.el4 |
glassfish-jaxwsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.1-1jpp.ep1.3.el4 | 0:2.1.1-1jpp.ep1.3.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el4 | 0:0.0.0-1.1jpp.ep1.1.el4 |
javassistRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.8.0-1.ep1.el4 | 0:3.8.0-1.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el4 | 0:1.5.5-2.CP02.0jpp.ep1.2.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el4 | 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.1.el4 | 0:2.2.2-3.SP9.0jpp.ep1.1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.10.el4 | 0:4.3.0-2.GA_CP02.ep1.10.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el4 | 0:2.0.0-4.CP06.0jpp.ep1.1.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el4 | 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el4 | 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.1-0jpp.ep1.11.el4 | 0:2.0.1-0jpp.ep1.11.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-3.GA_CP02.ep1.9.el4 | 0:4.3.0-3.GA_CP02.ep1.9.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-3.GA_CP02.ep1.9.el4 | 0:4.3.0-3.GA_CP02.ep1.9.el4 |
glassfish-jafRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.1.0-0jpp.ep1.12.el5.1 | 0:1.1.0-0jpp.ep1.12.el5.1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el5 | 0:1.4.0-0jpp.ep1.10.el5 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.4.el5.2 | 0:2.1.4-1jpp.ep1.4.el5.2 |
glassfish-jaxwsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.1.1-1jpp.ep1.3.el5 | 0:2.1.1-1jpp.ep1.3.el5 |
glassfish-jstlRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.0-0jpp.ep1.10.el5 | 0:1.2.0-0jpp.ep1.10.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el5 | 0:0.0.0-1.1jpp.ep1.1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 | 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 | 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el5 | 0:0.0.0-1.1jpp.ep1.1.el5 |
javassistRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.8.0-1jpp.ep1.2.el5 | 0:3.8.0-1jpp.ep1.2.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el5 | 0:1.5.5-2.CP02.0jpp.ep1.2.el5 |
jboss-jaxrRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.0-SP1.0jpp.ep1.4.el5 | 0:1.2.0-SP1.0jpp.ep1.4.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5 | 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.2.el5 | 0:2.2.2-3.SP9.0jpp.ep1.2.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.10.el5.2 | 0:4.3.0-2.GA_CP02.ep1.10.el5.2 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el5 | 0:2.0.0-4.CP06.0jpp.ep1.1.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1 | 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5 | 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.1-0jpp.ep1.11.el5 | 0:2.0.1-0jpp.ep1.11.el5 |
jbossxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.0.0-2.SP3.0jpp.ep1.3.el5.1 | 0:1.0.0-2.SP3.0jpp.ep1.3.el5.1 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.6.el5 | 0:4.3.0-2.GA_CP02.ep1.6.el5 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el4 | 0:1.4.0-0jpp.ep1.10.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el4 | 0:0.0.0-1.1jpp.ep1.1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el4 | 0:1.5.5-2.CP02.0jpp.ep1.2.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.1.el4 | 0:2.2.2-3.SP9.0jpp.ep1.1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.10.el4 | 0:1.2.1-1.ep1.10.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.10.el4 | 0:1.2.1-1.ep1.10.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-3.GA_CP04.ep1.8.el4 | 0:4.2.0-3.GA_CP04.ep1.8.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el4 | 0:2.0.0-4.CP06.0jpp.ep1.1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.5.el4 | 0:4.2.0-4.GA_CP04.ep1.5.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.5.el4 | 0:4.2.0-4.GA_CP04.ep1.5.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el5 | 0:1.5.5-2.CP02.0jpp.ep1.2.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.2.el5 | 0:2.2.2-3.SP9.0jpp.ep1.2.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.9.el5 | 0:1.2.1-1.ep1.9.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.9.el5 | 0:1.2.1-1.ep1.9.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.7.el5.6 | 0:4.2.0-4.GA_CP04.ep1.7.el5.6 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el5 | 0:2.0.0-4.CP06.0jpp.ep1.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.3.el5 | 0:4.2.0-4.GA_CP04.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.3.el5 | 0:4.2.0-4.GA_CP04.ep1.3.el5 |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, cwes, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5342 is a medium vulnerability (CVSS 6.4) in Apache Tomcat, published December 27, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.16%, the 92nd percentile. No source names a fixed version.
References
secunia.com/advisories/30676
redhat.com/support/errata/RHSA-2008-0862.html
vupen.com/english/advisories/2008/2823
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10417
Show 108 moreShow less
securityfocus.com/bid/31681
vmware.com/security/advisories/VMSA-2009-0016.html
mandriva.com/security/advisories?name=MDVSA-2008:188
support.avaya.com/elmodocs2/security/ASA-2008-401.htm
securityreason.com/securityalert/3485
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
tomcat.apache.org/security-6.html
security.gentoo.org/glsa/glsa-200804-10.xml
exchange.xforce.ibmcloud.com/vulnerabilities/39201
svn.apache.org/viewvc?view=rev&revision=606594
osvdb.org/39833
debian.org/security/2008/dsa-1447
marc.info?l=bugtraq&m=139344343412337&w=2
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
support.apple.com/kb/HT3216
lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2007-5342
github.com/advisories/GHSA-w65j-cmqc-37p2
access.redhat.com/errata/RHSA-2008:0042
bugzilla.redhat.com/show_bug.cgi?id=333791
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0042.json
cve.org/CVERecord?id=CVE-2007-5342