NVD

Id
5267  
Name
CVE-2008-5518  
Description
Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.  
Reject
 
CVSS Version
2  
CVSS Score
9.4  
Severity
High  
CVSS Base Score
9.4  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:N)  
Pub Date
2017-01-03  
Published
2009-04-17  
Modified Date
2009-04-28  
Seq
2008-5518  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33269 5267 CVE-2008-5518 http://dsecrg.com/pages/vul/show.php?id=118  View
33270 5267 CVE-2008-5518 http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214  View
33271 5267 CVE-2008-5518 http://issues.apache.org/jira/browse/GERONIMO-4597  View
33272 5267 CVE-2008-5518 8458  View
33273 5267 CVE-2008-5518 20090416 [DSECRG-09-018] Apache Geronimo - Directory Traversal vulnerabilities  View
33274 5267 CVE-2008-5518 34562  View
33275 5267 CVE-2008-5518 ADV-2009-1089  View
33276 5267 CVE-2008-5518 geronimo-repository-directory-traversal(49898)  View
33277 5267 CVE-2008-5518 geronimo-dbmanager-directory-traversal(49899)  View
33278 5267 CVE-2008-5518 geronimo-keystores-directory-traversal(49900)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41729 JVNDB-2009-002736 Apache Geronimo Application Server の Web 管理コンソールにおけるファイルを任意のディレクトリにアップロードされる脆弱性 Apache Geronimo Application Server の Web 管理コンソールには、ファイルを任意のディレクトリにアップロードされる脆弱性が存在します。 CVE-2008-5518 35631 CVE-2008-5518 5267 9.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002736.html 2009-04-17 2012-06-26 View