FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-0450

This CVE name corresponds to:

Entered	Topic
2007-07-24	tomcat -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-0450 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-0450
Phase	Assigned(20070123)

Description

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.

References

Source	Reference
BUGTRAQ	20080108 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
BUGTRAQ	20090127 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
BUGTRAQ	20090124 CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities
MLIST	[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
CONFIRM	http://tomcat.apache.org/security-4.html
CONFIRM	http://tomcat.apache.org/security-5.html
CONFIRM	http://tomcat.apache.org/security-6.html
CONFIRM	http://docs.info.apple.com/article.html?artnum=306172
CONFIRM	http://www.fujitsu.com/global/support/software/security/products-f/interstage-200702e.html
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm
CONFIRM	http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
CONFIRM	http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
APPLE	APPLE-SA-2007-07-31
GENTOO	GLSA-200705-03
HP	HPSBUX02262
HP	SSRT071447
MANDRIVA	MDKSA-2007:241
REDHAT	RHSA-2007:0327
REDHAT	RHSA-2007:0360
REDHAT	RHSA-2008:0261
SUNALERT	239312
SUSE	SUSE-SR:2007:005
SUSE	SUSE-SR:2007:015
BID	22960
BUGTRAQ	20070314 SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal
MISC	http://www.sec-consult.com/287.html
MISC	http://www.sec-consult.com/fileadmin/Advisories/20070314-0-apache_tomcat_directory_traversal.txt
BID	25159
OVAL	oval:org.mitre.oval:def:10643
VUPEN	ADV-2007-0975
VUPEN	ADV-2007-2732
VUPEN	ADV-2007-3087
VUPEN	ADV-2007-3386
VUPEN	ADV-2008-0065
VUPEN	ADV-2008-1979
VUPEN	ADV-2009-0233
SECUNIA	24732
SECUNIA	25106
SECUNIA	25280
SECUNIA	26235
SECUNIA	26660
SECUNIA	27037
SECUNIA	28365
SECUNIA	30908
SECUNIA	30899
SECUNIA	33668
SREASON	2446
XF	tomcat-proxy-directory-traversal(32988)