title: Red Hat Security Advisory: Red Hat Certificate System 7.3 security update
description: tomcat multiple content-length header poisioning tomcat DoS tomcat directory listing issue httpd: Expect header XSS httpd mod_status XSS tomcat directory traversal mod_perl PerlRun denial of service tomcat accept-language xss flaw httpd mod_cache segfault httpd scoreboard lack of PID protection tomcat handling of cookies tomcat handling of cookie values httpd: out of bounds read mod_autoindex XSS httpd: mod_imagemap XSS perl regular expression UTF parsing errors Improve cookie parsing for tomcat5 Absolute path traversal Apache Tomcat WEBDAV apache mod_status cross-site scripting mod_proxy_ftp XSS tomcat5 SSO cookie login information disclosure tomcat: Cross-Site-Scripting enabled by sendError call perl: heap corruption by regular expressions with utf8 characters httpd: mod_proxy_http DoS via excessive interim responses from the origin server tomcat RequestDispatcher information disclosure vulnerability httpd: mod_proxy_ftp globbing XSS tomcat request dispatcher information disclosure vulnerability apr-util heap buffer underwrite tomcat6 Denial-Of-Service with AJP connection tomcat6 Information disclosure in authentication classes httpd: possible temporary DoS (CPU consumption) in mod_deflate apr-util billion laughs attack apr-util single NULL byte buffer overflow apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages httpd: request header information leak
cpes: cpe:/a:redhat:certificate_system:7.3