Bug 187544 – CVE-2006-1546 Struts multiple issues (CVE-2006-1547, CVE-2006-1548)

Bug 187544 - CVE-2006-1546 Struts multiple issues (CVE-2006-1547, CVE-2006-1548)

Summary:	CVE-2006-1546 Struts multiple issues (CVE-2006-1547, CVE-2006-1548)

Status:	CLOSED WONTFIX

Aliases:	None

Product:	Red Hat Web Application Stack
Classification:	Retired
Component:	distribution (Show other bugs)
Sub Component:
Version:	v1
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Patrick Macdonald
QA Contact:	Len DiMaggio
Docs Contact:

URL:
Whiteboard:	public=20060322,reported=20060323,sou...
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2006-03-31 15:30 EST by Josh Bressers
Modified:	2012-09-18 06:46 EDT (History)
CC List:	1 user (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2012-09-18 06:46:46 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Josh Bressers 2006-03-31 15:30:19 EST

+++ This bug was initially created as a clone of Bug #187542 +++

Struts 1.2.9 has been released wich fixes 3 security issues.

* CVE-2006-1546 Validation always skipped with Globals.CANCEL_KEY.
* CVE-2006-1547 DOS attack, application hack.
* CVE-2006-1548 XSS vulnerability in LookupDispatchAction.

http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html

This issue should also affect RHAPS1

Comment 1 Mark J. Cox (Product Security) 2012-09-18 06:46:46 EDT

Product reached end of lifecycle for security updates

Note You need to log in before you can comment on or make changes to this bug.