CVE-2007-5461
Apache Tomcat Path Traversal Vulnerability
3.5 LowPublic exploit
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
Exploit likelihood
39.7%Up 4.8 points since Feb 4, 2022
What each source reports
NVD Score used
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
- Record
CVE-2007-5461- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
- Record
CVE-2007-5461- Updated
- 2026-11-02
EUVDEUVD-2022-5288 No score
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
- Record
EUVD-2022-5288- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5p2-vg3c-pmrr No score
Apache Tomcat Path Traversal Vulnerability
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
- Record
GHSA-v5p2-vg3c-pmrr- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-v5p2-vg3c-pmrr No score
Apache Tomcat Path Traversal Vulnerability
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
- Record
GHSA-v5p2-vg3c-pmrr- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
4.0.0 to 4.0.6 | None known |
org.apache.tomcat:tomcatMaven |
4.1.0 to 4.1.0 | None known |
org.apache.tomcat:tomcatMaven |
5.0.0 to 5.0.0 | None known |
org.apache.tomcat:tomcatMaven |
5.5.0 to 5.5.25 | None known |
org.apache.tomcat:tomcatMaven |
6.0.0 to 6.0.14 | None known |
tomcat5.5Debian:4.0 From an advisory covering 5 CVEs |
before 5.5.20-2etch1, plus listed versions 5.5.20-2 |
5.5.20-2etch1 |
tomcat5Debian:4.0 From an advisory covering 3 CVEs |
before 5.0.30-12etch1, plus listed versions 5.0.30-12 |
5.0.30-12etch1 |
org.apache.tomcat:tomcatMaven |
Listed versions 4.1.0 |
None known |
org.apache.tomcat:tomcatMaven |
Listed versions 5.0.0 |
None known |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
Show 193 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.5.23-0jpp.3.0.3.el5_1 | 0:5.5.23-0jpp.3.0.3.el5_1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.0-0jpp.ep1.8 | 0:1.4.0-0jpp.ep1.8 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:1.8.0.8-2.patch01.1jpp.ep1.1 | 1:1.8.0.8-2.patch01.1jpp.ep1.1 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-demoRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-manualRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el4 | 0:1.5.5-1.CP01.0jpp.ep1.1.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1 | 0:2.2.2-3.SP4.0jpp.ep1.1 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.3.el4 | 0:4.2.0-3.GA_CP02.ep1.3.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1 | 0:2.0.0-3.CP05.0jpp.ep1.1 |
jbossws-jboss42Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.2.el4 | 0:1.2.1-0jpp.ep1.2.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el4 | 0:1.0.12-1jpp.ep1.2.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el4 | 0:1.0.9-1jpp.ep1.2.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.1-1.SP4.0jpp.ep1.2 | 1:2.4.1-1.SP4.0jpp.ep1.2 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
concurrentRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.3.4-7jpp.ep1.6.el4 | 0:1.3.4-7jpp.ep1.6.el4 |
glassfish-jafRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.1.0-0jpp.ep1.10.el4 | 0:1.1.0-0jpp.ep1.10.el4 |
glassfish-javamailRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.4.0-0jpp.ep1.8 | 0:1.4.0-0jpp.ep1.8 |
glassfish-jsfRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2_04-1.p02.0jpp.ep1.18 | 0:1.2_04-1.p02.0jpp.ep1.18 |
glassfish-jstlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.0-0jpp.ep1.2 | 0:1.2.0-0jpp.ep1.2 |
hibernate3Red Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-annotations-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-entitymanagerRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-entitymanager-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hsqldbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:1.8.0.8-2.patch01.1jpp.ep1.1 | 1:1.8.0.8-2.patch01.1jpp.ep1.1 |
jacorbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jboss-aopRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el4 | 0:1.5.5-1.CP01.0jpp.ep1.1.el4 |
jboss-cacheRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 |
jboss-commonRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.2 | 0:1.2.1-0jpp.ep1.2 |
jboss-remotingRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1 | 0:2.2.2-3.SP4.0jpp.ep1.1 |
jboss-seamRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jboss-seam-docsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jbossasRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.3.el4 | 0:4.2.0-3.GA_CP02.ep1.3.el4 |
jbosswebRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1 | 0:2.0.0-3.CP05.0jpp.ep1.1 |
jbossws-wsconsume-implRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.0.0-0jpp.ep1.3 | 0:2.0.0-0jpp.ep1.3 |
jbossxbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.0-2.SP1.0jpp.ep1.2.el4 | 0:1.0.0-2.SP1.0jpp.ep1.2.el4 |
jcommonRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el4 | 0:1.0.12-1jpp.ep1.2.el4 |
jfreechartRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el4 | 0:1.0.9-1jpp.ep1.2.el4 |
jgroupsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:2.4.1-1.SP4.0jpp.ep1.2 | 1:2.4.1-1.SP4.0jpp.ep1.2 |
rh-eap-docsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
wsdl4jRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.6.2-1jpp.ep1.8 | 0:1.6.2-1jpp.ep1.8 |
tomcat5Red Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 From an advisory covering 4 CVEs |
before 0:5.5.23-0jpp_11rh | 0:5.5.23-0jpp_11rh |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 | 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 | 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 | 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 | 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.5.el5 | 0:2.3.0-1jpp.ep1.5.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el5 | 0:1.5.5-1.CP01.0jpp.ep1.1.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1.el5 | 0:2.2.2-3.SP4.0jpp.ep1.1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el5 | 0:1.2.1-1.ep1.3.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el5 | 0:1.2.1-1.ep1.3.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-4.GA_CP02.ep1.3.el5.3 | 0:4.2.0-4.GA_CP02.ep1.3.el5.3 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1.el5 | 0:2.0.0-3.CP05.0jpp.ep1.1.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el5 | 0:1.0.12-1jpp.ep1.2.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el5.1 | 0:1.0.9-1jpp.ep1.2.el5.1 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el5.1 | 0:4.2.0-3.GA_CP02.ep1.1.el5.1 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el5.1 | 0:4.2.0-3.GA_CP02.ep1.1.el5.1 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jfreechartRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
mod_perlRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.0.2-12.el4 | 0:2.0.2-12.el4 |
mod_perl-debuginfoRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.0.2-12.el4 | 0:2.0.2-12.el4 |
perl-Crypt-CBCRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-htmlRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:5.1.1-7 | 0:5.1.1-7 |
tomcat5Red Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.9 | 0:5.5.23-0jpp_4rh.9 |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apache Tomcat - 'WebDAV' Remote File Disclosure | 2007-10-14 |
| Exploit-DB | Apache Tomcat - WebDAV SSL Remote File Disclosure | 2007-10-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5461 is a low vulnerability (CVSS 3.5) in Apache Tomcat, published October 15, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 39.7%, the 98th percentile. No source names a fixed version.
References
debian.org/security/2008/dsa-1453
tomcat.apache.org/security-4.html
secunia.com/advisories/30908
support.apple.com/kb/HT2163
mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705%40apache.org%3E
securityfocus.com/bid/26070
Show 194 moreShow less
marc.info?l=full-disclosure&m=119239530508382
rhn.redhat.com/errata/RHSA-2008-0630.html
sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1
exchange.xforce.ibmcloud.com/vulnerabilities/37243
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9202
redhat.com/support/errata/RHSA-2008-0862.html
vupen.com/english/advisories/2008/1981/references
vmware.com/security/advisories/VMSA-2009-0016.html
lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
securitytracker.com/id?1018864
lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
support.avaya.com/elmodocs2/security/ASA-2008-401.htm
security.gentoo.org/glsa/glsa-200804-10.xml
geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html
www-1.ibm.com/support/docview.wss?uid=swg21286112
exploit-db.com/exploits/4530
mandriva.com/security/advisories?name=MDVSA-2009:136
issues.apache.org/jira/browse/GERONIMO-3549
lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2007-5461
github.com/apache/tomcat/commit/1e7b31e24801777f4de45d565f6a20a5377dd22c
access.redhat.com/errata/RHSA-2008:0042
bugzilla.redhat.com/show_bug.cgi?id=333791
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0042.json
cve.org/CVERecord?id=CVE-2007-5342
redhat.com/docs/manuals/jboss/jboss-eap-4.2.0.cp02/readme.html
rhstack.108.redhat.com/docs/Red_Hat_Application_Stack_V.1.2_Release_Notes.html
This page doesn't list everything
Left out here: 186 references. The JSON record has them.