Has anyone ever tried this - even unsuccessfully?
As usual working on a tight schedule for some security compliance issues! :)
You have 2 ways to that:
1 - Get a JBossAS subscription.
2 - Get a TC 5.5.23 and copy its jar files to the corresponding JbossAS location,
The latest patched TC that could be used with JBossas 4.0.5 is in http://repository.jboss.com/apache-tomcat/5.5.23.patch04-brew/lib/ I think it also work with 4.0.4