QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3835

Back to search

CVE-2006-3835

Published: Jul 25, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

VendorProductVersions

n/a

n/a

affected
n/a

References

19106
vdb-entry
x_refsource_BID
30908
third-party-advisory
x_refsource_SECUNIA
37297
third-party-advisory
x_refsource_SECUNIA
239312
vendor-advisory
x_refsource_SUNALERT
30899
third-party-advisory
x_refsource_SECUNIA
ADV-2008-1979
vdb-entry
x_refsource_VUPEN
ADV-2007-1727
vdb-entry
x_refsource_VUPEN
33668
third-party-advisory
x_refsource_SECUNIA
ADV-2009-0233
vdb-entry
x_refsource_VUPEN
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
25212
third-party-advisory
x_refsource_SECUNIA
1016576
vdb-entry
x_refsource_SECTRACK
RHSA-2008:0261
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now