On 2/7/12 12:01 PM, "Christopher Restorff"
<christopher.resto...@criticalwatch.com> wrote:

>Hello,
>
>I have a question regarding CVE-2005-4836:
>http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-4836
>
>The security bulletin, http://tomcat.apache.org/security-4.html,
>mentions that it will not be fixed in 4.x. However, there is no
>indication as to whether it affects 5.x or beyond. Is this issue
>persistent in the 5, 6, and 7 versions? If not, which versions are not
>affected.

The link that you posted has a section on vulnerable software and
versions.  My guess is that it has the complete list of all versions
affected.

Leon

>
>Any help will be greatly appreciated. Thank you for your time.
>
>Sorry if this is a repost. I think I sent it to the wrong address and
>never got any responses/confirmation that it went through.
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>For additional commands, e-mail: users-h...@tomcat.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to