GHSA-9737-qmgc-hfr9
Directory Traversal in Apache Tomcat
At a glance
- Published
- Updated
- CVE
- CVE-2008-5515
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat | introduced 4.1.0, fixed 4.1.40 |
| Maven · org.apache.tomcat:tomcat | introduced 5.5.0, fixed 5.5.28 |
| Maven · org.apache.tomcat:tomcat | introduced 6.0.0, fixed 6.0.20 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-5515 ADVISORY
- https://github.com/apache/tomcat/commit/6b61911f94d6d8d49ee933c5f1882a7e7c336d2c WEB
- https://github.com/apache/tomcat PACKAGE
- https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E WEB
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10422 WEB
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19452 WEB
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:6445 WEB
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html WEB
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html WEB
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html WEB
- http://jvn.jp/en/jp/JVN63832775/index.html WEB
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html WEB
- http://marc.info/?l=bugtraq&m=127420533226623&w=2 WEB
- http://marc.info/?l=bugtraq&m=129070310906557&w=2 WEB
- http://marc.info/?l=bugtraq&m=136485229118404&w=2 WEB
- http://support.apple.com/kb/HT4077 WEB
- http://tomcat.apache.org/security-4.html WEB
- http://tomcat.apache.org/security-5.html WEB
- http://tomcat.apache.org/security-6.html WEB
- http://www.debian.org/security/2011/dsa-2207 WEB
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html WEB
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 WEB
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:138 WEB
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 WEB
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |