Apache Tomcat Host Working Directory WAR File Directory Traversal Vulnerability

Apache Tomcat Host Working Directory WAR File Directory Traversal Vulnerability

References:

CVE-2009-2902 CVE-2009-2693 CVE-2010-1157 CVE-2010-2227 Multiple Vulnerabilitie (Oracle)
Apache Tomcat Homepage (Apache)
Revision 892815 (Apache Software Foundation)
Revision 902650 (Apache Software Foundation)
WebSphere Application Server Community Edition V2.1.1.4 - CHANGES.txt (IBM)
ASA-2012-026 Multiple Vulnerabilities in Apache Tomcat (Oracle October 2011) (Avaya)
RHSA-2010:0119 JBoss Enterprise Web Server 1.0.1 update (Red Hat)

Privacy Statement
Copyright 2010, SecurityFocus