Apache HTTP Server Tomcat Directory Traversal Vulnerability

Threat level definition

Apache HTTP Server Tomcat Directory Traversal Vulnerability

References:

Apache Tomcat Homepage (Apache)
ASA-2007-206 - tomcat security update (Avaya)
CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) ("Williams, James K" )
HPSBUX02262 SSRT071447 rev. 1 (Hewlett-Packard)
Apache HTTP Server / Tomcat directory traversal (SEC Consult Research)
CA20090123-01: Security Notice for Cohesion Tomcat (Computer Associates)
Directory traversal vulnerabilities in Interstage Application Server (Fujitsu)
Red Hat Security Advisory RHSA-2007:0327: tomcat security update (Red Hat)
RHSA-2007:1069-5 Moderate: tomcat security update for Red Hat Network Satellite (Red Hat)
RHSA-2008:0261-4 Moderate: Red Hat Network Satellite Server security update (Red Hat)
RHSA-2008:0524-4 Red Hat Network Satellite Server security update (Red Hat)
Security Vulnerabilities in Tomcat 4.0 Shipped with Solaris 9 and 10 (Sun Microsystems)

Privacy Statement
Copyright 2008, SecurityFocus