Russian Vulnerability Scanner Database

Back to List

CVE-2008-2370

Scores

EPSS

0.892high89.2%
0%20%40%60%80%100%

Percentile: 89.2%

CVSS

5.0medium2.0
0246810

CVSS Score: 5.0/10

All CVSS Scores

CVSS 2.0
5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-22

Exploits

Exploit ID: 32137

Source: exploitdb

URL: https://www.exploit-db.com/exploits/32137

Vulnerable Software (32)

Type: Configuration

Product: ant

Operating System: rhel

Trait: 
{  "fixed": "1.6.5-1jpp_1rh"}

Source: redhat

Type: Configuration

Product: avalon-logkit

Operating System: rhel

Trait: 
{  "fixed": "1.2-2jpp_4rh"}

Source: redhat

Type: Configuration

Product: axis

Operating System: rhel

Trait: 
{  "fixed": "1.2.1-1jpp_3rh"}

Source: redhat

Type: Configuration

Product: classpathx-jaf

Operating System: rhel

Trait: 
{  "fixed": "1.0-2jpp_6rh"}

Source: redhat

Type: Configuration

Product: classpathx-mail

Operating System: rhel

Trait: 
{  "fixed": "1.1.1-2jpp_8rh"}

Source: redhat

Type: Configuration

Product: geronimo-specs

Operating System: rhel

Trait: 
{  "fixed": "1.0-0.M4.1jpp_10rh"}

Source: redhat

Type: Configuration

Product: jakarta-commons-modeler

Operating System: rhel

Trait: 
{  "fixed": "2.0-3jpp_2rh"}

Source: redhat

Type: Configuration

Product: jbossweb

Operating System: rhel

Trait: 
{  "fixed": "2.0.0-5.CP07.0jpp.ep1.1.el4"}

Source: redhat

Type: Configuration

Product: jbossweb

Operating System: rhel

Trait: 
{  "fixed": "2.0.0-5.CP07.0jpp.ep1.1.el5"}

Source: redhat

Type: Configuration

Product: jbossweb

Operating System: rhel

Trait: 
{  "fixed": "2.0.0-5.CP07.0jpp.ep1.1.el4"}

Source: redhat

Type: Configuration

Product: jbossweb

Operating System: rhel

Trait: 
{  "fixed": "2.0.0-5.CP07.0jpp.ep1.1.el5"}

Source: redhat

Type: Configuration

Product: log4j

Operating System: rhel

Trait: 
{  "fixed": "1.2.12-1jpp_1rh"}

Source: redhat

Type: Configuration

Product: mx4j

Operating System: rhel

Trait: 
{  "fixed": "3.0.1-1jpp_4rh"}

Source: redhat

Type: Configuration

Product: pcsc-lite

Operating System: rhel

Trait: 
{  "fixed": "1.3.3-3.el4"}

Source: redhat

Type: Configuration

Product: rhpki-ca

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-20.el4"}

Source: redhat

Type: Configuration

Product: rhpki-java-tools

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-10.el4"}

Source: redhat

Type: Configuration

Product: rhpki-kra

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-14.el4"}

Source: redhat

Type: Configuration

Product: rhpki-manage

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-19.el4"}

Source: redhat

Type: Configuration

Product: rhpki-native-tools

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-6.el4"}

Source: redhat

Type: Configuration

Product: rhpki-ocsp

Operating System: rhel

Trait: 
{  "fixed": "7.3.0-13.el4"}

Source: redhat