Lucene search

K
cve[email protected]CVE-2006-3835
HistoryJul 25, 2006 - 1:22 p.m.

CVE-2006-3835

2006-07-2513:22:00
web.nvd.nist.gov
70
2
cve-2006-3835
apache tomcat 5
directory listing
vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.883 High

EPSS

Percentile

98.7%

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

Affected configurations

NVD
Node
apachetomcatMatch5.0.28
OR
apachetomcatMatch5.5.7
OR
apachetomcatMatch5.5.9
OR
apachetomcatMatch5.5.12
OR
apachetomcatMatch5.5.16

References

Social References

More

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.883 High

EPSS

Percentile

98.7%