PT-2008-4375 · Apache+2 · Apache Tomcat+2

Published 2008-08-13 · Updated 2023-02-13 · CVE-2008-2938

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16

Description The issue allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI when allowLinking and UTF-8 are enabled.

Recommendations For versions 4.1.0 through 4.1.37, consider disabling the allowLinking feature to prevent exploitation. For versions 5.5.0 through 5.5.26, restrict access to sensitive files and directories to minimize the risk of arbitrary file reading. For versions 6.0.0 through 6.0.16, avoid using UTF-8 encoding in the URI to prevent directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2938

GHSA-M7XJ-CCQC-P4G2

HPSBUX02401

RHSA-2008:0648

RHSA-2008:0862

RHSA-2008:0864

RHSA-2008:0877

RHSA-2008:1007

RHSA-2008_0648

Affected Products

Apache Tomcat

Hp-Ux

Red Hat

References · 74

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/tomcat_utf8_traversal.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/trendmicro_dlp_traversal.rb · Exploit
• 🔥 https://exploit-db.com/exploits/14489 · Exploit
• 🔥 https://exploit-db.com/exploits/6229 · Exploit
• http://redhat.com/support/errata/RHSA-2008-0864.html · Vendor Advisory
• http://tomcat.apache.org/security-4.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00712.html · Vendor Advisory
• http://tomcat.apache.org/security-5.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00859.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:188 · Vendor Advisory
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0862.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2938 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0648.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m7xj-ccqc-p4g2 · Vendor Advisory