CVE-2006-3835
35Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 46%
de la publicación al arma0 días
Publicada en NVD25 jul
1ª PoC21 jul
probabilidad de explotación
46%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28254⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.htmlhttp://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspxhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlhttp://secunia.com/advisories/25212http://secunia.com/advisories/30899http://secunia.com/advisories/30908http://secunia.com/advisories/33668http://secunia.com/advisories/37297http://securitytracker.com/id?1016576https://exchange.xforce.ibmcloud.com/vulnerabilities/27902https://exchange.xforce.ibmcloud.com/vulnerabilities/34183https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E