NVD

Id
52674  
Name
CVE-2007-0450  
Description
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-16  
Modified Date
2011-03-07  
Seq
2007-0450  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266090 52674 CVE-2007-0450 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
266091 52674 CVE-2007-0450 http://docs.info.apple.com/article.html?artnum=306172  View
266092 52674 CVE-2007-0450 SSRT071447  View
266093 52674 CVE-2007-0450 APPLE-SA-2007-07-31  View
266094 52674 CVE-2007-0450 [Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1  View
266095 52674 CVE-2007-0450 oval:org.mitre.oval:def:10643  View
266096 52674 CVE-2007-0450 GLSA-200705-03  View
266097 52674 CVE-2007-0450 2446  View
266098 52674 CVE-2007-0450 239312  View
266099 52674 CVE-2007-0450 http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm  View
266100 52674 CVE-2007-0450 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
266101 52674 CVE-2007-0450 http://tomcat.apache.org/security-4.html  View
266102 52674 CVE-2007-0450 http://tomcat.apache.org/security-5.html  View
266103 52674 CVE-2007-0450 http://tomcat.apache.org/security-6.html  View
266104 52674 CVE-2007-0450 http://www.fujitsu.com/global/support/software/security/products-f/interstage-200702e.html  View
266105 52674 CVE-2007-0450 MDKSA-2007:241  View
266106 52674 CVE-2007-0450 SUSE-SR:2007:015  View
266107 52674 CVE-2007-0450 SUSE-SR:2007:005  View
266108 52674 CVE-2007-0450 RHSA-2007:0327  View
266109 52674 CVE-2007-0450 RHSA-2007:0360  View
266110 52674 CVE-2007-0450 RHSA-2008:0261  View
266111 52674 CVE-2007-0450 http://www.sec-consult.com/287.html  View
266112 52674 CVE-2007-0450 http://www.sec-consult.com/fileadmin/Advisories/20070314-0-apache_tomcat_directory_traversal.txt  View
266113 52674 CVE-2007-0450 20070314 SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal  View
266114 52674 CVE-2007-0450 20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1  View
266115 52674 CVE-2007-0450 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
266116 52674 CVE-2007-0450 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
266117 52674 CVE-2007-0450 22960  View
266118 52674 CVE-2007-0450 25159  View
266119 52674 CVE-2007-0450 ADV-2007-0975  View
266120 52674 CVE-2007-0450 ADV-2007-2732  View
266121 52674 CVE-2007-0450 ADV-2007-3087  View
266122 52674 CVE-2007-0450 ADV-2007-3386  View
266123 52674 CVE-2007-0450 ADV-2008-0065  View
266124 52674 CVE-2007-0450 ADV-2008-1979  View
266125 52674 CVE-2007-0450 ADV-2009-0233  View
266126 52674 CVE-2007-0450 tomcat-proxy-directory-traversal(32988)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51555 JVNDB-2007-000217 Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性 Apache Tomcat には、URL に含まれる "" (バックスラッシュ) やエンコードされたバックスラッシュ "%5C" の文字列を有効なディレクトリの境界 ("/") として解釈してしまうため、Apache Tomcat と Apache HTTP Server との組合せで特定の Apache 用プロキシモジュール (mod_proxy, mod_rewrite, mod_jk) を使用している場合、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-0450 23805 CVE-2007-0450 52674 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000217.html 2007-03-16 2010-01-06 View