Tomcat 4.1.0 – 4.1.37; 5.5.0 – 5.5.26; 6.0.0 – 6.0.16

By Security Team on Monday, September 29th, 2008 in Security Notifications | Related Software Packages: Tomcat

Affects

Apache Tomcat 4.1.0 through 4.1.37
Apache Tomcat 5.5.0 through 5.5.26
Apache Tomcat 6.0.0 through 6.0.16

Description of issue

When RequestDispatcher is being used, Tomcat normalizes the path before removing the query string from the URI, allowing an attacker to perform a directory traversal attack and read arbitrary files using a relative path in a request parameter.

Resolution and Availability of Patch

This problem is addressed by the Apache Tomcat version 6.0.18 release. Fixes for users who require earlier (5.x or 4.x) versions are available from the project’s Subversion repository. If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifiers

CVE-2008-2370

Share this post:

Security Team

We'll keep you safe. Trust us, that's our job. Even though, contrary to what our Avatar might imply, we're not all linebackers. In fact, some of us are quite petite. And others of us wear high heeled boots. Red. Wondering whether we also know what we're talking about? C'mon -have you read any of these security posts?

Click here to cancel reply.