CVE-2006-3835

Scores

EPSS

0.564medium56.4%
0%20%40%60%80%100%

Percentile: 56.4%

CVSS

5.0medium2.0
0246810

CVSS Score: 5.0/10

All CVSS Scores

CVSS 2.0
5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhat

Exploits

Exploit ID: 28254

Source: exploitdb

URL: https://www.exploit-db.com/exploits/28254

Vulnerable Software (77)

Type: Configuration

Product: ant

Operating System: rhel

Trait:
{  "fixed": "1.6.5-1jpp_1rh"}

Source: redhat

Type: Configuration

Product: avalon-logkit

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_4rh"}

Source: redhat

Type: Configuration

Product: axis

Operating System: rhel

Trait:
{  "fixed": "1.2.1-1jpp_3rh"}

Source: redhat

Type: Configuration

Product: classpathx-jaf

Operating System: rhel

Trait:
{  "fixed": "1.0-2jpp_6rh"}

Source: redhat

Type: Configuration

Product: classpathx-mail

Operating System: rhel

Trait:
{  "fixed": "1.1.1-2jpp_8rh"}

Source: redhat

Type: Configuration

Product: geronimo-specs

Operating System: rhel

Trait:
{  "fixed": "1.0-0.M4.1jpp_10rh"}

Source: redhat

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.38.rhn"}

Source: redhat

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.37.rhn"}

Source: redhat

Type: Configuration

Product: jabberd

Operating System: rhel

Trait:
{  "fixed": "2.0s10-3.38.rhn"}

Source: redhat

Type: Configuration

Product: jakarta-commons-modeler

Operating System: rhel

Trait:
{  "fixed": "2.0-3jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-modeler

Operating System: rhel

Trait:
{  "fixed": "2.0-3jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-pool

Operating System: rhel

Trait:
{  "fixed": "1.2-2jpp_2rh"}

Source: redhat

Type: Configuration

Product: java-1.4.2-ibm

Operating System: rhel

Trait:
{  "fixed": "1.4.2.10-1jpp.2.el3"}

Source: redhat

Type: Configuration

Product: java-1.4.2-ibm

Operating System: rhel

Trait:
{  "fixed": "1.4.2.10-1jpp.2.el4"}

Source: redhat