{"id":"CVE-2009-2693","published":"2010-01-28T20:00:00Z","modified":"2024-08-07T05:59:56Z","title":"Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote…","vendor":null,"product":null,"tier":"tail","description":{"text":"Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.09638,"percentile":0.95475,"provenance":"source"},"cwes":[],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://svn.apache.org/viewvc?rev=892815&view=rev","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/39317","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.debian.org/security/2011/dsa-2207","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://secunia.com/advisories/40330","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:177","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://securitytracker.com/id?1023505","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/43310","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55855","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.vupen.com/english/advisories/2010/1559","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://www.securityfocus.com/bid/37944","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.vupen.com/english/advisories/2010/1986","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0580.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://secunia.com/advisories/40813","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/38541","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/509148/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://ubuntu.com/usn/usn-899-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://support.apple.com/kb/HT4077","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/38687","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/38346","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0582.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19355","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://secunia.com/advisories/38316","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.vupen.com/english/advisories/2010/0213","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","tags":["vendor-advisory","x_refsource_HP"]},{"url":"http://svn.apache.org/viewvc?rev=902650&view=rev","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":19.1,"factors":[{"name":"EPSS percentile","points":19.09}]},"affected":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","vulnerableRanges":[">=5.5.0, <5.5.29",">=6.0.0, <6.0.24"],"patched":["5.5.29","6.0.24"],"from":["GHSA-ggx9-4728-588r"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3958","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-apache-traffic-server-cve-2009-2693","children":[{"from":"CVE-2009-2693","to":"CVE-2020-9484","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["java/org/apache/catalina/startup/ExpandWar.java","java/org/apache/catalina/startup/HostConfig.java"],"commits":["https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6","https://github.com/apache/tomcat/commit/3aa8f28db7efb311cdd1b6fe15a9cd3b167a2222","https://github.com/apache/tomcat/commit/4785433a226a20df6acbea49296e1ce7e23de453"],"basis":"shared function","functions":["expand","fixDocBase"]}]},{"from":"CVE-2009-2693","to":"CVE-2021-25329","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["java/org/apache/catalina/startup/ExpandWar.java","java/org/apache/catalina/startup/HostConfig.java"],"commits":["https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6","https://github.com/apache/tomcat/commit/6d66e99ef85da93e4d2c2a536ca51aa3418bfaf4"],"basis":"shared function","functions":["expand","fixDocBase"]}]}],"packageHistory":[{"cve":"CVE-2008-5515","published":"2009-06-16","fixed":"6.0.20","kev":false,"link":{"from":"CVE-2008-5515","to":"CVE-2009-2693","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"5.5.28","toFixed":"5.5.29","daysApart":226},{"kind":"version-step","provenance":"source","package":"Maven:org.apache.tomcat:tomcat","fromFixed":"6.0.20","toFixed":"6.0.24","daysApart":226}]}},{"cve":"CVE-2009-0781","published":"2009-03-09","fixed":"6.0.20","kev":false},{"cve":"CVE-2009-0783","published":"2009-06-05","fixed":"6.0.20","kev":false},{"cve":"CVE-2009-2693","published":"2010-01-28","fixed":"6.0.24","kev":false},{"cve":"CVE-2009-2901","published":"2010-01-28","fixed":"6.0.24","kev":false},{"cve":"CVE-2009-2902","published":"2010-01-28","fixed":"6.0.24","kev":false},{"cve":"CVE-2010-1157","published":"2010-04-23","fixed":"6.0.28","kev":false}],"package":"Maven:org.apache.tomcat:tomcat"}}