NVD

Id
2832  
Name
CVE-2008-2938  
Description
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2011-03-07  
Seq
2008-2938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17944 2832 CVE-2008-2938 APPLE-SA-2008-10-09  View
17945 2832 CVE-2008-2938 SUSE-SR:2008:018  View
17946 2832 CVE-2008-2938 SUSE-SR:2009:004  View
17947 2832 CVE-2008-2938 SSRT090005  View
17948 2832 CVE-2008-2938 oval:org.mitre.oval:def:10587  View
17949 2832 CVE-2008-2938 4148  View
17950 2832 CVE-2008-2938 http://support.apple.com/kb/HT3216  View
17951 2832 CVE-2008-2938 http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm  View
17952 2832 CVE-2008-2938 http://tomcat.apache.org/security-4.html  View
17953 2832 CVE-2008-2938 http://tomcat.apache.org/security-5.html  View
17954 2832 CVE-2008-2938 http://tomcat.apache.org/security-6.html  View
17955 2832 CVE-2008-2938 VU#343355  View
17956 2832 CVE-2008-2938 MDVSA-2008:188  View
17957 2832 CVE-2008-2938 6229  View
17958 2832 CVE-2008-2938 RHSA-2008:0648  View
17959 2832 CVE-2008-2938 RHSA-2008:0862  View
17960 2832 CVE-2008-2938 RHSA-2008:0864  View
17961 2832 CVE-2008-2938 http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt  View
17962 2832 CVE-2008-2938 20080811 Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability  View
17963 2832 CVE-2008-2938 20091107 ToutVirtual VirtualIQ Multiple Vulnerabilities  View
17964 2832 CVE-2008-2938 30633  View
17965 2832 CVE-2008-2938 31681  View
17966 2832 CVE-2008-2938 1020665  View
17967 2832 CVE-2008-2938 ADV-2008-2343  View
17968 2832 CVE-2008-2938 ADV-2008-2780  View
17969 2832 CVE-2008-2938 ADV-2008-2823  View
17970 2832 CVE-2008-2938 ADV-2009-0320  View
17971 2832 CVE-2008-2938 tomcat-allowlinking-utf8-directory-traversal(44411)  View
17972 2832 CVE-2008-2938 FEDORA-2008-7977  View
17973 2832 CVE-2008-2938 FEDORA-2008-8113  View
17974 2832 CVE-2008-2938 FEDORA-2008-8130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46301 JVNDB-2008-001611 Apache Tomcat におけるディレクトリトラバーサルの脆弱性 Apache Tomcat には、allowLinking および UTF-8 を有効にしている場合に、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2938 33051 CVE-2008-2938 2832 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001611.html 2008-08-12 2012-09-28 View