title: Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update
description: tomcat: information disclosure in authentication headers mod_dav: DoS (httpd child process crash) by parsing URI structure with missing path segments apr-util: high memory consumption in apr_brigade_split_line() tomcat: file permission bypass flaw tomcat: cross-site-scripting vulnerability in the manager application tomcat: XSS vulnerability in HTML Manager interface apr: unconstrained recursion in apr_fnmatch httpd: mod_proxy_ajp worker moved to error state when timeout exceeded
cpes: cpe:/a:redhat:jboss_enterprise_web_server:1::el4 cpe:/a:redhat:jboss_enterprise_web_server:1::el5 cpe:/a:redhat:jboss_enterprise_web_server:1::el6