Lucene search
Dsquare SecurityE-197HistoryFeb 01, 2012 - 12:00 a.m.
Apache Tomcat File Disclosure
2012-02-0100:00:00
Dsquare Security
37
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.969 High
EPSS
Percentile
99.6%
Originally reported as a Tomcat vulnerability the root cause of this issue is that the JVM does not correctly decode UTF-8 encoded URLs to UTF-8.
Vulnerability Type: File Disclosure
For the exploit source code contact DSquare Security sales team.Related
openvas
openvas
SLES10: Security update for Tomcat 5
2009-10-13 00:00:00
SLES9: Security update for Tomcat
2009-10-10 00:00:00
SLES9: Security update for Tomcat
2009-10-10 00:00:00
packetstorm
packetstorm
tomcat-traverse.txt
2008-08-13 00:00:00
Oracle Containers For Java Traversal
2009-01-21 00:00:00
Apache Tomcat UTF-8 Directory Traversal
2010-07-28 00:00:00
nessus
nessus
SuSE9 Security Update : Tomcat (YOU Patch Number 12232)
2009-09-24 00:00:00
openSUSE Security Update : tomcat6 (tomcat6-161)
2009-07-21 00:00:00
SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 5539)
2008-09-10 00:00:00
securityvulns
securityvulns
Java Runtime UTF-8 Decoder Smuggling Vector
2009-01-11 00:00:00
seebug
seebug
Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability
2008-08-11 00:00:00
apache tomcat < 6.0.18 utf8 - Directory Traversal vulnerability
2014-07-01 00:00:00
Apache Tomcat UTF-8目录遍历漏洞
2008-08-12 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitpack
exploitpack
Apache Tomcat 6.0.18 - utf8 Directory Traversal (PoC)
2008-08-11 00:00:00
toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities
2009-11-07 00:00:00
cert
cert
Apache Tomcat UTF8 Directory Traversal Vulnerability
2008-08-19 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_TOMCAT_UTF8
2008-08-13 00:41:00
veracode
veracode
Directory Traversal
2018-11-09 01:31:46
exploitdb
exploitdb
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal (PoC)
2008-08-11 00:00:00
toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities
2009-11-07 00:00:00
ubuntucve
ubuntucve
CVE-2008-2938
2008-08-13 00:00:00
osv
osv
Apache Tomcat Directory Traversal vulnerability
2022-05-01 23:55:04
cve
cve
CVE-2008-2938
2008-08-13 00:41:00
prion
prion
Directory traversal
2008-08-13 00:41:00
github
github
Apache Tomcat Directory Traversal vulnerability
2022-05-01 23:55:04
redhat
redhat
(RHSA-2008:0877) Important: jbossweb security update
2008-09-22 00:00:00
(RHSA-2008:0648) Important: tomcat security update
2008-08-27 00:00:00
(RHSA-2008:0864) Important: tomcat security update
2008-10-02 00:00:00
centos
centos
tomcat5 security update
2008-08-28 22:01:41
oraclelinux
oraclelinux
tomcat security update
2008-08-27 00:00:00
atlassian
atlassian
Upgrade standalone Tomcat to 5.5.25
2008-01-15 04:23:59
Upgrade standalone Tomcat to 5.5.25
2008-01-15 04:23:59
fedora
fedora
[SECURITY] Fedora 9 Update: tomcat5-5.5.27-0jpp.2.fc9
2008-09-16 23:25:10
[SECURITY] Fedora 9 Update: tomcat6-6.0.18-1.1.fc9
2008-09-11 17:17:43
[SECURITY] Fedora 8 Update: tomcat5-5.5.27-0jpp.2.fc8
2008-09-16 23:28:35
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.969 High
EPSS
Percentile
99.6%
Related for E-197