VitalQIP Tomcat Upgrade

The current version of tomcat shipped with version 1.5 and 1.6 of VitalQIP's AMS and ESM appliances is contain a couple vulnerabilities. These can be addressed for the most part by upgrading to tomcat version 5.5.13. Till alacatel-lucent provides an upgrade package you can follow the recopies below.

AMS Tomcat 5.5.31 Upgrade Recipe

# Upgrade stock tomcat to 5.5.31 to address security vulnerabilities
. /opt/ams/etc/shrc
#1 Backup tomcat
/opt/ams/etc/ams-stop-server
# If you haven't upgraded to 1.6 then you will need to create a backup dir
# mkdir /opt/ams_backup
cd /opt/ams
tar -cvf - tomcat | tar -C /opt/ams_backup/ -xf -
#2 Get current tomcat 5.5.31
mkdir /opt/ams_enhancements
cd /opt/ams_enhancements
wget http://apache.imghat.com/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz
tar -xzvf apache-tomcat-5.5.31.tar.gz
#3 Upgrade
cd apache-tomcat-5.5.31
tar -cvf - bin server shared common | tar -C /opt/ams/tomcat -xf -
# Remove default page
rm /opt/ams/tomcat/webapps/ROOT/index.jsp
#4 restart server
/opt/ams/etc/ams-start-server

QIP ESM Tomcat 5.5.31 Upgrade Recipe

# Upgrade stock tomcat to 5.5.31 to address security vulnerabilities
. /opt/qip/etc/shrc
#1 Backup tomcat
/etc/init.d/qip-tomcat stop
mkdir /opt/qip_backup
cd /opt/qip
tar -cvf - tomcat | tar -C /opt/qip_backup/ -xf -
#2 Get current tomcat 5.5.31
mkdir /opt/qip_enhancements
cd /opt/qip_enhancements
wget http://apache.imghat.com/tomcat/tomcat-5/v5.5.31/bin/apache-tomcat-5.5.31.tar.gz
tar -xzvf apache-tomcat-5.5.31.tar.gz
#3 Upgrade
cd apache-tomcat-5.5.31
tar -cvf - bin server shared common | tar -C /opt/qip/tomcat -xf -
# Remove default page
rm /opt/qip/tomcat/webapps/ROOT/index.jsp
#4 restart server
/etc/init.d/qip-tomcat stop