header-logo
Suggest Exploit
vendor:
Tomcat
by:
SecurityFocus
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: Tomcat
Affected Version From: 3.2.x
Affected Version To: 3.2.x
Patch Exists: YES
Related CWE: CVE-2002-0022
CPE: a:apache:tomcat:3.2
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: HP-UX 11.04 (VVOS)
2002

Apache Tomcat Directory Traversal Vulnerability

Apache Tomcat 3.2.x on HP-UX 11.04 (VVOS) systems is vulnerable to a directory traversal attack. An attacker can send a specially crafted HTTP request containing a directory traversal string (e.g. “/%3F.jsp”) to the vulnerable server, which will allow the attacker to view the contents of directories.

Mitigation:

Upgrade to Apache Tomcat 4.1.x or later.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5838/info

Apache Tomcat is reported to be prone to a vulnerability which may enable remote attackers to disclose the contents of directories.

This issue is reported to affect Apache Tomcat 3.2.x on HP-UX 11.04 (VVOS) systems. It is not known whether other systems are also affected.

GET /%3F.jsp HTTP/1.0

Navigation

Suggest Exploit

Services By CQR