CVE-2008-2370
CVE Descriptions
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 5 | AV:N/AC:L/Au:N/C:P/I:N/A:N | nvd@nist.gov |
EPSS
EPSS Score
EPSS Percentile
Exploit information
Exploit Database EDB-ID : 32137
Publication date : 2008-07-31 22h00 +00:00
Author : Stefano Di Paola
EDB Verified : Yes
Products Mentioned
Configuraton 0
Apache>>Tomcat >> Version 4.1.0
Apache>>Tomcat >> Version 4.1.1
Apache>>Tomcat >> Version 4.1.2
Apache>>Tomcat >> Version 4.1.3
Apache>>Tomcat >> Version 4.1.4
Apache>>Tomcat >> Version 4.1.5
Apache>>Tomcat >> Version 4.1.6
Apache>>Tomcat >> Version 4.1.7
Apache>>Tomcat >> Version 4.1.8
Apache>>Tomcat >> Version 4.1.9
Apache>>Tomcat >> Version 4.1.10
Apache>>Tomcat >> Version 4.1.11
Apache>>Tomcat >> Version 4.1.12
Apache>>Tomcat >> Version 4.1.13
Apache>>Tomcat >> Version 4.1.14
Apache>>Tomcat >> Version 4.1.15
Apache>>Tomcat >> Version 4.1.16
Apache>>Tomcat >> Version 4.1.17
Apache>>Tomcat >> Version 4.1.18
Apache>>Tomcat >> Version 4.1.19
Apache>>Tomcat >> Version 4.1.20
Apache>>Tomcat >> Version 4.1.21
Apache>>Tomcat >> Version 4.1.22
Apache>>Tomcat >> Version 4.1.23
Apache>>Tomcat >> Version 4.1.24
Apache>>Tomcat >> Version 4.1.25
Apache>>Tomcat >> Version 4.1.26
Apache>>Tomcat >> Version 4.1.27
Apache>>Tomcat >> Version 4.1.28
Apache>>Tomcat >> Version 4.1.29
Apache>>Tomcat >> Version 4.1.30
Apache>>Tomcat >> Version 4.1.31
Apache>>Tomcat >> Version 4.1.32
Apache>>Tomcat >> Version 4.1.33
Apache>>Tomcat >> Version 4.1.34
Apache>>Tomcat >> Version 4.1.35
Apache>>Tomcat >> Version 4.1.36
Apache>>Tomcat >> Version 4.1.37
Apache>>Tomcat >> Version 5.5.0
Apache>>Tomcat >> Version 5.5.1
Apache>>Tomcat >> Version 5.5.2
Apache>>Tomcat >> Version 5.5.3
Apache>>Tomcat >> Version 5.5.4
Apache>>Tomcat >> Version 5.5.5
Apache>>Tomcat >> Version 5.5.6
Apache>>Tomcat >> Version 5.5.7
Apache>>Tomcat >> Version 5.5.8
Apache>>Tomcat >> Version 5.5.9
Apache>>Tomcat >> Version 5.5.10
Apache>>Tomcat >> Version 5.5.11
Apache>>Tomcat >> Version 5.5.12
Apache>>Tomcat >> Version 5.5.13
Apache>>Tomcat >> Version 5.5.14
Apache>>Tomcat >> Version 5.5.15
Apache>>Tomcat >> Version 5.5.16
Apache>>Tomcat >> Version 5.5.17
Apache>>Tomcat >> Version 5.5.18
Apache>>Tomcat >> Version 5.5.19
Apache>>Tomcat >> Version 5.5.20
Apache>>Tomcat >> Version 5.5.21
Apache>>Tomcat >> Version 5.5.22
Apache>>Tomcat >> Version 5.5.23
Apache>>Tomcat >> Version 5.5.24
Apache>>Tomcat >> Version 5.5.25
Apache>>Tomcat >> Version 5.5.26
Apache>>Tomcat >> Version 6.0.0
Apache>>Tomcat >> Version 6.0.1
Apache>>Tomcat >> Version 6.0.2
Apache>>Tomcat >> Version 6.0.3
Apache>>Tomcat >> Version 6.0.4
Apache>>Tomcat >> Version 6.0.5
Apache>>Tomcat >> Version 6.0.6
Apache>>Tomcat >> Version 6.0.7
Apache>>Tomcat >> Version 6.0.8
Apache>>Tomcat >> Version 6.0.9
Apache>>Tomcat >> Version 6.0.10
Apache>>Tomcat >> Version 6.0.11
Apache>>Tomcat >> Version 6.0.12
Apache>>Tomcat >> Version 6.0.13
Apache>>Tomcat >> Version 6.0.14
Apache>>Tomcat >> Version 6.0.15
Apache>>Tomcat >> Version 6.0.16
References
Tags : mailing-list, x_refsource_BUGTRAQ
Tags : vdb-entry, signature, x_refsource_OVAL
Tags : vdb-entry, signature, x_refsource_OVAL
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : mailing-list, x_refsource_BUGTRAQ
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
Tags : x_refsource_CONFIRM
Tags : vendor-advisory, x_refsource_APPLE
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
