Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2693
HistoryJan 28, 2010 - 12:00 a.m.

CVE-2009-2693

2010-01-2800:00:00
ubuntu.com
ubuntu.com
7

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.6%

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and
6.0.0 through 6.0.20 allows remote attackers to create or overwrite
arbitrary files via a … (dot dot) in an entry in a WAR file, as
demonstrated by a …/…/bin/catalina.bat entry.

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchtomcat6< 6.0.18-0ubuntu3.3UNKNOWN
ubuntu9.04noarchtomcat6< 6.0.18-0ubuntu6.2UNKNOWN
ubuntu9.10noarchtomcat6< 6.0.20-2ubuntu2.1UNKNOWN

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.6%