NVD

Id
49934  
Name
CVE-2009-2693  
Description
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2010-01-28  
Modified Date
2016-08-22  
Seq
2009-2693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252632 49934 CVE-2009-2693 HPSBUX02541  View
252633 49934 CVE-2009-2693 APPLE-SA-2010-03-29-1  View
252634 49934 CVE-2009-2693 SUSE-SR:2010:008  View
252635 49934 CVE-2009-2693 openSUSE-SU-2012:1700  View
252636 49934 CVE-2009-2693 openSUSE-SU-2012:1701  View
252637 49934 CVE-2009-2693 openSUSE-SU-2013:0147  View
252638 49934 CVE-2009-2693 SSRT100029  View
252639 49934 CVE-2009-2693 SSRT100825  View
252640 49934 CVE-2009-2693 HPSBUX02860  View
252641 49934 CVE-2009-2693 HPSBST02955  View
252642 49934 CVE-2009-2693 oval:org.mitre.oval:def:19355  View
252643 49934 CVE-2009-2693 oval:org.mitre.oval:def:7017  View
252644 49934 CVE-2009-2693 1023505  View
252645 49934 CVE-2009-2693 http://support.apple.com/kb/HT4077  View
252646 49934 CVE-2009-2693 http://svn.apache.org/viewvc?rev=892815&view=rev  View
252647 49934 CVE-2009-2693 http://svn.apache.org/viewvc?rev=902650&view=rev  View
252648 49934 CVE-2009-2693 http://tomcat.apache.org/security-5.html  View
252649 49934 CVE-2009-2693 http://tomcat.apache.org/security-6.html  View
252650 49934 CVE-2009-2693 USN-899-1  View
252651 49934 CVE-2009-2693 DSA-2207  View
252652 49934 CVE-2009-2693 MDVSA-2010:176  View
252653 49934 CVE-2009-2693 MDVSA-2010:177  View
252654 49934 CVE-2009-2693 RHSA-2010:0119  View
252655 49934 CVE-2009-2693 RHSA-2010:0580  View
252656 49934 CVE-2009-2693 RHSA-2010:0582  View
252657 49934 CVE-2009-2693 20100124 [SECURITY] CVE-2009-2693 Apache Tomcat unexpected file deletion and/or alteration  View
252658 49934 CVE-2009-2693 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
252659 49934 CVE-2009-2693 37944  View
252660 49934 CVE-2009-2693 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
252661 49934 CVE-2009-2693 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
252662 49934 CVE-2009-2693 ADV-2010-0213  View
252663 49934 CVE-2009-2693 ADV-2010-1559  View
252664 49934 CVE-2009-2693 ADV-2010-1986  View
252665 49934 CVE-2009-2693 tomcat-war-directory-traversal(55855)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35291 JVNDB-2010-001071 Apache Tomcat におけるディレクトリトラバーサルの脆弱性 Apache Tomcat には、任意のファイルを作成される、または上書きされる脆弱性が存在します。 CVE-2009-2693 40124 CVE-2009-2693 49934 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001071.html 2010-01-28 2015-03-23 View