Folks,
We have an application compiled with Java 1.5_x and running in JBoss-4.0.5.GA. Realized that the application
was affected by the below tomcat vulnerabilities and decided to migrate to jboss-5.1.0.GA.
During migration encountered by the bellow error,
java.util.zip.ZipException: error in opening zip file
at java.util.zip.ZipFile.open(Native Method)
at
java.util.zip.ZipFile.<init>(Unknown Source)
at java.util.zip.ZipFile.<init>(Unknown Source)
at
org.jboss.virtual.plugins.context.zip.ZipFileWrapper.ensureZipFile(ZipFileWrapper.java:175)
at
org.jboss.virtual.plugins.context.zip.ZipFileWrapper.acquire(ZipFileWrapper.java:245)
at
org.jboss.virtual.plugins.context.zip.ZipEntryContext.initEntries(ZipEntryContext.java:484)
at
org.jboss.virtual.plugins.context.zip.ZipEntryContext.ensureEntries(ZipEntryContext.java:619)
Please advice.
Tomcat vulnerabilities:
------------------------------
CVE ID 2007-0774 High Risk
CVE ID 2007-0450 High Risk
CVE ID 2008-2370 High Risk
CVE ID 2005-2090 Medium Risk
CVE ID 2005-3510 Medium Risk
CVE ID 2005-4838 Medium Risk
CVE ID 2006-3835 Medium Risk
CVE ID 2006-7195 Medium Risk
CVE ID 2006-7196 Medium Risk
CVE ID 2006-7197 Medium Risk
CVE ID 2007-1355 Medium Risk
CVE ID 2007-1358 Medium Risk
CVE ID 2007-1858 Medium Risk
CVE ID 2007-1860 Medium Risk
CVE ID 2007-2449 Medium Risk
CVE ID 2007-2450 Medium Risk
CVE ID 2007-3382 Medium Risk
CVE ID 2007-3385 Medium Risk
CVE ID 2007-3386 Medium Risk
CVE ID 2007-5333 Medium Risk
CVE ID 2007-5461 Medium Risk
CVE ID 2008-1947 Medium Risk
CVE ID 2008-3271 Medium Risk
CVE ID 2008-5519 Medium Risk
CVE ID 2009-0580 Medium Risk
CVE ID 2009-0781 Medium Risk
CVE ID 2009-0783 Medium Risk
