CVE-2008-2938 Apache Tomcat Directory Traversal vulnerability
MediumCVSS 4.3
EPSS 99.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat(Maven) | >= 4.1.0, < 4.1.39 | 4.1.39 |
| org.apache.tomcat/tomcat(Maven) | >= 5.5.0, < 5.5.27 | 5.5.27 |
| org.apache.tomcat/tomcat(Maven) | >= 6.0.0, < 6.0.18 | 6.0.18 |
| org.apache.tomcat/tomcat(Maven) | >= 4.1.0, <= 4.1.37 | No fix listed |
| org.apache.tomcat/tomcat(Maven) | >= 5.5.0, <= 5.5.26 | No fix listed |
| org.apache.tomcat/tomcat(Maven) | >= 6.0.0, <= 6.0.16 | No fix listed |
| apache tomcat | >= 4.0.0, <= 4.1.37 | No fix listed |
| apache tomcat | >= 5.0.0, <= 5.5.26 | No fix listed |
| apache tomcat | >= 6.0.0, <= 6.0.16 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- 6229 exploit third-party-advisory vdb-entry
- FEDORA-2008-7977 third-party-advisory vendor-advisory
- FEDORA-2008-8113 third-party-advisory vendor-advisory
- FEDORA-2008-8130 third-party-advisory vendor-advisory
- tomcat-allowlinking-utf8-directory-traversal(44411) third-party-advisory vdb-entry
- github.com product
- [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- lists.apache.org
- [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ mailing-list
- lists.apache.org
- lists.apple.com
- oval:org.mitre.oval:def:10587 signature tool-signature vdb-entry
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- web.archive.org
- SUSE-SR:2008:018 third-party-advisory vendor-advisory
- SUSE-SR:2009:004 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.avaya.com third-party-advisory
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- VU#343355 third-party-advisory us-government-resource
- MDVSA-2008:188 third-party-advisory vendor-advisory
- github.com
- APPLE-SA-2008-10-09 mailing-list third-party-advisory vendor-advisory
- HPSBUX02401 third-party-advisory vendor-advisory
- 31639 broken-link third-party-advisory
- 31865 broken-link third-party-advisory
- 31891 broken-link third-party-advisory
- 31982 broken-link third-party-advisory
- 32120 broken-link third-party-advisory
- 32222 broken-link third-party-advisory
- 32266 broken-link third-party-advisory
- 33797 broken-link third-party-advisory
- 37297 broken-link third-party-advisory
- 4148 third-party-advisory
- RHSA-2008:0648 third-party-advisory vendor-advisory
- RHSA-2008:0862 third-party-advisory vendor-advisory
- RHSA-2008:0864 third-party-advisory vendor-advisory
- www.securenetwork.it third-party-advisory
- 20080811 Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability mailing-list third-party-advisory vdb-entry
- 20091107 ToutVirtual VirtualIQ Multiple Vulnerabilities mailing-list third-party-advisory vdb-entry
- 30633 third-party-advisory vdb-entry
- 31681 third-party-advisory vdb-entry
- 1020665 third-party-advisory vdb-entry
- ADV-2008-2343 third-party-advisory vdb-entry
- ADV-2008-2780 third-party-advisory vdb-entry
- ADV-2008-2823 third-party-advisory vdb-entry
- ADV-2009-0320 third-party-advisory vdb-entry