CVE-2009-2693

Published: Jan 28, 2010Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

Affected (51)

Products: Apache: Tomcat

Apache

1 product

Tomcat

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	Version 5.5.0
Apache Tomcat	Version 5.5.10
Apache Tomcat	Version 5.5.11
Apache Tomcat	Version 5.5.12
Apache Tomcat	Version 5.5.13
Apache Tomcat	Version 5.5.14
Apache Tomcat	Version 5.5.15
Apache Tomcat	Version 5.5.16
Apache Tomcat	Version 5.5.17
Apache Tomcat	Version 5.5.18
Apache Tomcat	Version 5.5.19
Apache Tomcat	Version 5.5.1
Apache Tomcat	Version 5.5.20
Apache Tomcat	Version 5.5.21
Apache Tomcat	Version 5.5.22
Apache Tomcat	Version 5.5.23
Apache Tomcat	Version 5.5.24
Apache Tomcat	Version 5.5.25
Apache Tomcat	Version 5.5.26
Apache Tomcat	Version 5.5.27
Apache Tomcat	Version 5.5.28
Apache Tomcat	Version 5.5.2
Apache Tomcat	Version 5.5.3
Apache Tomcat	Version 5.5.4
Apache Tomcat	Version 5.5.5
Apache Tomcat	Version 5.5.6
Apache Tomcat	Version 5.5.7
Apache Tomcat	Version 5.5.8
Apache Tomcat	Version 5.5.9
Apache Tomcat	Version 6.0.0
Apache Tomcat	Version 6.0.10
Apache Tomcat	Version 6.0.11
Apache Tomcat	Version 6.0.12
Apache Tomcat	Version 6.0.13
Apache Tomcat	Version 6.0.14
Apache Tomcat	Version 6.0.15
Apache Tomcat	Version 6.0.16
Apache Tomcat	Version 6.0.17
Apache Tomcat	Version 6.0.18
Apache Tomcat	Version 6.0.19
Apache Tomcat	Version 6.0.1
Apache Tomcat	Version 6.0.20
Apache Tomcat	Version 6.0.2
Apache Tomcat	Version 6.0.3
Apache Tomcat	Version 6.0.4
Apache Tomcat	Version 6.0.5
Apache Tomcat	Version 6.0.6
Apache Tomcat	Version 6.0.7
Apache Tomcat	Version 6.0.8
Apache Tomcat	Version 6.0.9
Apache Tomcat	Version 6.0

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (94)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=127420533226623&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=133469267822771&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=136485229118404&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=139344343412337&w=2

Source: cve@mitre.org

http://secunia.com/advisories/38316

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38346

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38541

Source: cve@mitre.org

http://secunia.com/advisories/38687

Source: cve@mitre.org

http://secunia.com/advisories/39317

Source: cve@mitre.org

http://secunia.com/advisories/40330

Source: cve@mitre.org

http://secunia.com/advisories/40813

Source: cve@mitre.org

http://secunia.com/advisories/43310

Source: cve@mitre.org

http://secunia.com/advisories/57126

Source: cve@mitre.org

http://securitytracker.com/id?1023505

Source: cve@mitre.org

http://support.apple.com/kb/HT4077

Source: cve@mitre.org

http://svn.apache.org/viewvc?rev=892815&view=rev

Source: cve@mitre.org

Patch

http://svn.apache.org/viewvc?rev=902650&view=rev

Source: cve@mitre.org

http://tomcat.apache.org/security-5.html

Source: cve@mitre.org

PatchVendor Advisory

http://tomcat.apache.org/security-6.html

Source: cve@mitre.org

PatchVendor Advisory

http://ubuntu.com/usn/usn-899-1

Source: cve@mitre.org

http://www.debian.org/security/2011/dsa-2207

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:176

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:177

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0119.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0580.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0582.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/509148/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/37944

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: cve@mitre.org

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/0213

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/1559

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1986

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/55855

Source: cve@mitre.org

https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19355

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113