{"id":"CVE-2008-2370","published":"2008-08-04T01:00:00Z","modified":"2024-08-07T08:58:02Z","title":"Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used…","vendor":null,"product":null,"tier":"tail","description":{"text":"Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.52716,"percentile":0.98965,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/30494","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://tomcat.apache.org/security-4.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/495022/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10577","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.vupen.com/english/advisories/2009/1535","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0862.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/34013","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/2823","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/37460","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0002.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/31982","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/31681","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/32120","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/33999","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/31865","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5876","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://securityreason.com/securityalert/4099","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://secunia.com/advisories/31639","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:188","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://secunia.com/advisories/31379","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2009/0320","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0864.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44156","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/35393","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/32222","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/36249","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/31891","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/33797","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securitytracker.com/id?1020623","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.vupen.com/english/advisories/2008/2305","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/2780","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/31381","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://marc.info/?l=bugtraq&m=123376588623823&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www.vupen.com/english/advisories/2009/2215","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://support.apple.com/kb/HT3216","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2009/0503","tags":["vdb-entry","x_refsource_VUPEN"]}],"priority":{"score":24.8,"factors":[{"name":"EPSS percentile","points":19.79},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2008-08-01"},"first":{"date":"2008-08-01","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/32137"},"provenance":"source"},"referencesTotal":60,"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=4.1.0, <4.1.38",">=5.5.0, <5.5.27",">=6.0.0, <6.0.18"],"patched":["4.1.38","5.5.27","6.0.18"],"from":["GHSA-m8h8-6rvg-f4mg"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4524","exploited":false,"provenance":"source"},"exploits":[{"id":32137,"url":"https://www.exploit-db.com/exploits/32137","title":"Apache Tomcat 6.0.16 - 'RequestDispatcher' Information Disclosure","date":"2008-08-01","verified":true,"provenance":"source"}],"lineage":{"packageHistory":[{"cve":"CVE-2007-5333","published":"2008-02-12","fixed":"6.0.15","kev":false,"link":{"from":"CVE-2007-5333","to":"CVE-2008-2370","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"4.1.37","toFixed":"4.1.38","daysApart":174}]}},{"cve":"CVE-2008-0002","published":"2008-02-12","fixed":"6.0.16","kev":false},{"cve":"CVE-2008-1232","published":"2008-08-04","fixed":"6.0.17","kev":false,"link":{"from":"CVE-2008-1232","to":"CVE-2008-2370","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"6.0.17","toFixed":"6.0.18","daysApart":0}]}},{"cve":"CVE-2008-1947","published":"2008-06-04","fixed":"6.0.18","kev":false},{"cve":"CVE-2008-2370","published":"2008-08-04","fixed":"6.0.18","kev":false},{"cve":"CVE-2008-2938","published":"2008-08-13","fixed":"6.0.18","kev":false,"link":{"from":"CVE-2008-2370","to":"CVE-2008-2938","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"4.1.38","toFixed":"4.1.39","daysApart":9}]}},{"cve":"CVE-2009-0580","published":"2009-06-05","fixed":"6.0.19","kev":false},{"cve":"CVE-2008-5515","published":"2009-06-16","fixed":"6.0.20","kev":false}],"package":"Maven:org.apache.tomcat:tomcat"}}