Exploit Apache Tomcat 6.0.16 - 'RequestDispatcher' Information Disclosure

[Exploiter]

EDB-ID

32137

Проверка EDB

1. Пройдено

Автор

STEFANO DI PAOLA

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2008-2370

Дата публикации

2008-08-01

source: https://www.securityfocus.com/bid/30494/info

Apache Tomcat is prone to a remote information-disclosure vulnerability.

Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server. Information obtained may lead to further attacks.

The following versions are affected:

Tomcat 4.1.0 through 4.1.37
Tomcat 5.5.0 through 5.5.26
Tomcat 6.0.0 through 6.0.16

Tomcat 3.x, 4.0.x, and 5.0.x may also be affected.

http://www.example.com/page.jsp?blah=/../WEB-INF/web.xml