[jboss-jira] [JBoss JIRA] Updated: (JBWEB-163) CVE-2009-2693, CVE-2009-3555

Thu Apr 8 14:58:38 EDT 2010

     [ https://jira.jboss.org/jira/browse/JBWEB-163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike Millson updated JBWEB-163:
-------------------------------

        Summary: CVE-2009-2693, CVE-2009-3555  (was: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3555)
    Description: 
CVE-2009-2693 tomcat: unexpected file deletion and/or alteration
CVE-2009-3555 TLS: MITM attacks via session renegotiation

  was:
CVE-2009-2693 tomcat: unexpected file deletion and/or alteration
CVE-2009-2901 tomcat: insecure partial deploy after failed undeploy
CVE-2009-2902 tomcat: unexpected file deletion in work directory
CVE-2009-3555 TLS: MITM attacks via session renegotiation


> CVE-2009-2693, CVE-2009-3555
> ----------------------------
>
>                 Key: JBWEB-163
>                 URL: https://jira.jboss.org/jira/browse/JBWEB-163
>             Project: JBoss Web
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Core
>            Reporter: Mike Millson
>            Assignee: Mike Millson
>             Fix For: JBossWeb-3.0.0.Beta3
>
>
> CVE-2009-2693 tomcat: unexpected file deletion and/or alteration
> CVE-2009-3555 TLS: MITM attacks via session renegotiation

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira