Thinking OPEN

Tomcat 4.1.0 – 4.1.37; 5.5.0 – 5.5.26; 6.0.0 – 6.0.16

By Security Team • Sep 29th, 2008 • Category: Security Notifications

Affects

Apache Tomcat 4.1.0 through 4.1.37
Apache Tomcat 5.5.0 through 5.5.26
Apache Tomcat 6.0.0 through 6.0.16

Description of issue

When RequestDispatcher is being used, Tomcat normalizes the path before removing the query string from the URI, allowing an attacker to perform a directory traversal attack and read arbitrary files using a relative path in a request parameter.

Resolution and Availability of Patch

This problem is addressed by the Apache Tomcat version 6.0.18 release. Fixes for users who require earlier (5.x or 4.x) versions are available from the project’s Subversion repository. If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifiers

CVE-2008-2370

Related OLEX Packages: tomcat
Security Team

Security Team
We'll keep you safe. Trust us, that's our job. Even though, contrary to what our Avatar might imply, we're not all linebackers. In fact, some of us are quite petite. And others of us wear high heeled boots. Red. Wondering whether we also know what we're talking about? C'mon -have you read any of these security posts?
All posts by Security Team

Leave a Reply