tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

Ubuntu 8.10 / 9.04 / 9.10 : tomcat6 vulnerabilities (USN-899-1)

It was discovered that Tomcat did not correctly validate WAR filenames or paths when deploying. A remote attacker could send a specially crafted WAR file to be deployed and cause arbitrary files and directories to be created, overwritten, or deleted. Note that Tenable Network Security has extract...

CVE-2009-2693

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

CVE-2009-2693

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

CVE-2009-2693

Apache Tomcat contains a directory-traversal flaw (CVE-2009-2693) affecting Tomcat 5.5.0–5.5.28 and 6.0.0–6.0.20. An attacker can cause creation or overwrite of arbitrary files by including a .. path in a WAR entry, for example ../../bin/catalina.bat. The connected documents reiterate this exact ...

CVE-2009-2693

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

Tomcat vulnerability analysis using vulnerability warning-the black bar safety net

Some of the Tomcat after the installation does not modify the default password for username admin, password is empty, so that you can log directly into it. There are two directories you can visit: /admin /manager ml the /admin directory use: Service--host--actions--Create New Context create a...

WebSphere '.war' File Detection

Binary data 4961.prm...

the jar command is a simple application to get webshell-vulnerability warning-the black bar safety net

Effect: allows to upload war file of the jsp environment, the Local the jsp Trojan packaged as a war file after uploading to server! Environment assumptions: 1, assuming that you on the hard disk of a directory need to create a good jar/war package 2, the directory includes the following content:...

PT-1999-1521 · War · War Ftp Daemon

Name of the Vulnerable Software and Affected Versions: War FTP Daemon version 1.70 Description: The issue allows remote attackers to cause a denial of service by flooding the War FTP Daemon with connections. Recommendations: For War FTP Daemon version 1.70, consider restricting the number of...