NVD

Id
62503  
Name
CVE-2006-3835  
Description
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-25  
Modified Date
2011-03-07  
Seq
2006-3835  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324693 62503 CVE-2006-3835 20060721 Directory Listing in Apache Tomcat 5.x.x  View
324694 62503 CVE-2006-3835 http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx  View
324695 62503 CVE-2006-3835 SUSE-SR:2009:004  View
324696 62503 CVE-2006-3835 1016576  View
324697 62503 CVE-2006-3835 239312  View
324698 62503 CVE-2006-3835 http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm  View
324699 62503 CVE-2006-3835 http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540  View
324700 62503 CVE-2006-3835 http://tomcat.apache.org/security-4.html  View
324701 62503 CVE-2006-3835 http://tomcat.apache.org/security-5.html  View
324702 62503 CVE-2006-3835 RHSA-2008:0261  View
324703 62503 CVE-2006-3835 http://www.sec-consult.com/289.html  View
324704 62503 CVE-2006-3835 http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt  View
324705 62503 CVE-2006-3835 20070509 SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express  View
324706 62503 CVE-2006-3835 20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities  View
324707 62503 CVE-2006-3835 20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)  View
324708 62503 CVE-2006-3835 20091107 ToutVirtual VirtualIQ Multiple Vulnerabilities  View
324709 62503 CVE-2006-3835 19106  View
324710 62503 CVE-2006-3835 ADV-2007-1727  View
324711 62503 CVE-2006-3835 ADV-2008-1979  View
324712 62503 CVE-2006-3835 ADV-2009-0233  View
324713 62503 CVE-2006-3835 apache-tomcat-url-information-disclosure(27902)  View
324714 62503 CVE-2006-3835 nokia-tomcat-source-code-disclosure(34183)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58677 JVNDB-2006-000942 Apache Tomcat における不正にディレクトリの一覧を取得される脆弱性 Apache Tomcat にはファイル名の前に ";" (セミコロン) が含まれたリクエスト URL を処理する際にセミコロン以降の文字列を適切に認識しないため、そのファイルが存在するディレクトリの一覧を表示してしまう脆弱性が存在します。 CVE-2006-3835 19937 CVE-2006-3835 62503 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000942.html 2006-07-25 2008-07-11 View