Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: softfail (nike.apache.org: transitioning domain of
 christopher.restorff@criticalwatch.com does not designate 74.7.105.220 as
 permitted sender)
Message-ID: <4F31832B.3040804@criticalwatch.com>
Date: Tue, 07 Feb 2012 14:01:47 -0600
From: Christopher Restorff <christopher.restorff@criticalwatch.com>
Organization: Critical Watch
User-Agent: Mozilla/5.0 (Windows NT 6.1;
 rv:9.0) Gecko/20111222 Thunderbird/9.0.1
MIME-Version: 1.0
To: users@tomcat.apache.org
Subject: Question regarding mappings for CVE-2005-4836
References: <4F21DE8B.4040309@criticalwatch.com>
In-Reply-To: <4F21DE8B.4040309@criticalwatch.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello,

I have a question regarding CVE-2005-4836:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-4836

The security bulletin, http://tomcat.apache.org/security-4.html,
mentions that it will not be fixed in 4.x. However, there is no
indication as to whether it affects 5.x or beyond. Is this issue
persistent in the 5, 6, and 7 versions? If not, which versions are not
affected.

Any help will be greatly appreciated. Thank you for your time.

Sorry if this is a repost. I think I sent it to the wrong address and 
never got any responses/confirmation that it went through.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org