QwikSec

Security Database

CVE

CWE

Training

CVE-2007-0450

Published: Mar 16, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://tomcat.apache.org/security-4.html

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_VUPEN

vendor-advisory

x_refsource_SUNALERT

vdb-entry

x_refsource_VUPEN

tomcat-proxy-directory-traversal(32988)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_VUPEN

SUSE-SR:2007:005

vendor-advisory

x_refsource_SUSE

APPLE-SA-2007-07-31

vendor-advisory

x_refsource_APPLE

vdb-entry

x_refsource_VUPEN

20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1

mailing-list

x_refsource_BUGTRAQ

20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm

x_refsource_CONFIRM

http://tomcat.apache.org/security-6.html

x_refsource_CONFIRM

http://www.sec-consult.com/287.html

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

http://www.sec-consult.com/fileadmin/Advisories/20070314-0-apache_tomcat_directory_traversal.txt

x_refsource_MISC

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=306172

x_refsource_CONFIRM

vendor-advisory

x_refsource_HP

vdb-entry

x_refsource_VUPEN

vendor-advisory

x_refsource_HP

http://tomcat.apache.org/security-5.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_REDHAT

http://www.fujitsu.com/global/support/software/security/products-f/interstage-200702e.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SREASON

http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx

x_refsource_CONFIRM

http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540

x_refsource_CONFIRM

20070314 SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal

mailing-list

x_refsource_BUGTRAQ

vendor-advisory

x_refsource_MANDRIVA

SUSE-SR:2007:015

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

oval:org.mitre.oval:def:10643

vdb-entry

signature

x_refsource_OVAL

[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20190325 svn commit: r1856174 [25/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20190413 svn commit: r1857494 [18/20] - in /tomcat/site/trunk: ./ docs/ xdocs/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20190415 svn commit: r1857582 [20/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20200203 svn commit: r1873527 [26/30] - /tomcat/site/trunk/docs/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/

mailing-list

x_refsource_MLIST

[tomcat-dev] 20200213 svn commit: r1873980 [30/34] - /tomcat/site/trunk/docs/

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2007-0450 - Security Vulnerability | QwikSec