← voltar
CVE-2006-3835

CVE-2006-3835

EPSS 45.6%
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/28254não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.htmlhttp://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspxhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlhttp://secunia.com/advisories/25212http://secunia.com/advisories/30899http://secunia.com/advisories/30908http://secunia.com/advisories/33668http://secunia.com/advisories/37297http://securitytracker.com/id?1016576https://exchange.xforce.ibmcloud.com/vulnerabilities/27902https://exchange.xforce.ibmcloud.com/vulnerabilities/34183https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E