• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Apache HTTP Server Tomcat Directory Traversal Vulnerability

Solution:
The vendor has released Tomcat 5.5.22 and 6.0.10 to address this issue. Please see the references for more information.


Apache Software Foundation Tomcat 5.0

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2007-007Pan.dmg For Mac OS X Server v10.3.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.3.9

• Apple SecUpd2007-007Pan.dmg For Mac OS X v10.3.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.10

• Apple SecUpd2007-007Ti.dmg For Mac OS X v10.4.10 (PowerPC)
  http://www.apple.com/support/downloads/


• Apple SecUpd2007-007Univ.dmg For Mac OS X v10.4.10 (Universal)
  http://www.apple.com/support/downloads/

Apache Software Foundation Tomcat 5.2

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.3

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.4

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.1

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.11

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.12

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.14

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.16

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.19

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.2

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.21

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.22

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.4

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.7

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 5.5.9

• Apache apache-tomcat-5.5.23.tar.gz
  http://gulus.usherbrooke.ca/pub/appl/apache/tomcat/tomcat-5/v5.5.23/bi n/apache-tomcat-5.5.23.tar.gz

Apache Software Foundation Tomcat 6.0.3

• Apache apache-tomcat-6.0.10.tar.gz
  http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.10/bin/apache-tomca t-6.0.10.tar.gz

Apache Software Foundation Tomcat 6.0.5

• Apache apache-tomcat-6.0.10.tar.gz
  http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.10/bin/apache-tomca t-6.0.10.tar.gz

Apache Software Foundation Tomcat 6.0.7

• Apache apache-tomcat-6.0.10.tar.gz
  http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.10/bin/apache-tomca t-6.0.10.tar.gz

Apache Software Foundation Tomcat 6.0.8

• Apache apache-tomcat-6.0.10.tar.gz
  http://apache.mirror.rafal.ca/tomcat/tomcat-6/v6.0.10/bin/apache-tomca t-6.0.10.tar.gz