CVE-2008-2370 vulnerabilities and exploits

(subscribe to this query)

Apache Tomcat 4.1.0 up to and including 4.1.37, 5.5.0 up to and including 5.5.26, and 6.0.0 up to and including 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote malicious users to conduct dire...

Apache Tomcat 4.1.0 Apache Tomcat 4.1.1 Apache Tomcat 4.1.2 Apache Tomcat 4.1.3 Apache Tomcat 4.1.4 Apache Tomcat 4.1.5 Apache Tomcat 4.1.6 Apache Tomcat 4.1.7 Apache Tomcat 4.1.8 Apache Tomcat 4.1.9 Apache Tomcat 4.1.10 Apache Tomcat 4.1.11

1 EDB exploit

The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. Thi...

Apache Ode Apache Ode 1.0 Apache Ode 1.1 Apache Ode 1.1.1

Directory traversal vulnerability in Apache Tomcat 4.1.0 up to and including 4.1.37, 5.5.0 up to and including 5.5.26, and 6.0.0 up to and including 6.0.16, when allowLinking and UTF-8 are enabled, allows remote malicious users to read arbitrary files via encoded directory traver...

2 EDB exploits2 Metasploit modules1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook