CVE-2009-2693 : Detail

CVE-2009-2693

Directory Traversal
A01-Broken Access Control
0.55%V3
Network
2010-01-28
19h00 +00:00
2020-02-13
15h09 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Metrics

Metrics Score Severity CVSS Vector Source
V2 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Apache>>Tomcat >> Version 5.5.0

Apache>>Tomcat >> Version 5.5.1

Apache>>Tomcat >> Version 5.5.2

Apache>>Tomcat >> Version 5.5.3

Apache>>Tomcat >> Version 5.5.4

Apache>>Tomcat >> Version 5.5.5

Apache>>Tomcat >> Version 5.5.6

Apache>>Tomcat >> Version 5.5.7

Apache>>Tomcat >> Version 5.5.8

Apache>>Tomcat >> Version 5.5.9

Apache>>Tomcat >> Version 5.5.10

Apache>>Tomcat >> Version 5.5.11

Apache>>Tomcat >> Version 5.5.12

Apache>>Tomcat >> Version 5.5.13

Apache>>Tomcat >> Version 5.5.14

Apache>>Tomcat >> Version 5.5.15

Apache>>Tomcat >> Version 5.5.16

Apache>>Tomcat >> Version 5.5.17

Apache>>Tomcat >> Version 5.5.18

Apache>>Tomcat >> Version 5.5.19

Apache>>Tomcat >> Version 5.5.20

Apache>>Tomcat >> Version 5.5.21

Apache>>Tomcat >> Version 5.5.22

Apache>>Tomcat >> Version 5.5.23

Apache>>Tomcat >> Version 5.5.24

Apache>>Tomcat >> Version 5.5.25

Apache>>Tomcat >> Version 5.5.26

Apache>>Tomcat >> Version 5.5.27

Apache>>Tomcat >> Version 5.5.28

Apache>>Tomcat >> Version 6.0

Apache>>Tomcat >> Version 6.0.0

Apache>>Tomcat >> Version 6.0.1

Apache>>Tomcat >> Version 6.0.2

Apache>>Tomcat >> Version 6.0.3

Apache>>Tomcat >> Version 6.0.4

Apache>>Tomcat >> Version 6.0.5

Apache>>Tomcat >> Version 6.0.6

Apache>>Tomcat >> Version 6.0.7

Apache>>Tomcat >> Version 6.0.8

Apache>>Tomcat >> Version 6.0.9

Apache>>Tomcat >> Version 6.0.10

Apache>>Tomcat >> Version 6.0.11

Apache>>Tomcat >> Version 6.0.12

Apache>>Tomcat >> Version 6.0.13

Apache>>Tomcat >> Version 6.0.14

Apache>>Tomcat >> Version 6.0.15

Apache>>Tomcat >> Version 6.0.16

Apache>>Tomcat >> Version 6.0.17

Apache>>Tomcat >> Version 6.0.18

Apache>>Tomcat >> Version 6.0.19

Apache>>Tomcat >> Version 6.0.20

References

http://marc.info/?l=bugtraq&m=127420533226623&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/39317
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2011/dsa-2207
Tags : vendor-advisory, x_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/40330
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
Tags : vendor-advisory, x_refsource_MANDRIVA
http://securitytracker.com/id?1023505
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/43310
Tags : third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=127420533226623&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2010/1559
Tags : vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.securityfocus.com/bid/37944
Tags : vdb-entry, x_refsource_BID
http://www.vupen.com/english/advisories/2010/1986
Tags : vdb-entry, x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2010-0580.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/40813
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/38541
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
Tags : vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/57126
Tags : third-party-advisory, x_refsource_SECUNIA
http://ubuntu.com/usn/usn-899-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://support.apple.com/kb/HT4077
Tags : x_refsource_CONFIRM
http://secunia.com/advisories/38687
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/38346
Tags : third-party-advisory, x_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=133469267822771&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2010-0119.html
Tags : vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2010-0582.html
Tags : vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=136485229118404&w=2
Tags : vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38316
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/0213
Tags : vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=139344343412337&w=2
Tags : vendor-advisory, x_refsource_HP