CVE-2007-0450
Apache Tomcat Directory Traversal
Résumé
Apache Tomcat Directory Traversal
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Directory traversal vulnerability in Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) / (slash), (2) \ (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.apache.tomcat:tomcat
[{"type":"ECOSYSTEM","events":[{"introduced":"6.0"},{"fixed":"6.0.10"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web exchange.xforce.ibmcloud.com
- web docs.info.apple.com
- web lists.apple.com
- web lists.vmware.com
- web security.gentoo.org
- web tomcat.apache.org
- web tomcat.apache.org
- web tomcat.apache.org
- web redhat.com
- web redhat.com
- web redhat.com