Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-rwvj-tq6x-2ubs
SummaryDirectory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
Aliases
0
alias CVE-2008-2938
1
alias GHSA-m7xj-ccqc-p4g2
Fixed_packages
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.1.0
purl pkg:maven/org.apache.tomcat/tomcat@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18j8-kwdv-dyak
1
vulnerability VCID-27q8-96un-9fbk
2
vulnerability VCID-2jnv-segx-zkfd
3
vulnerability VCID-4rcx-xfn5-7kdb
4
vulnerability VCID-6epr-2hbd-skcz
5
vulnerability VCID-6p3e-4u8s-17ep
6
vulnerability VCID-7969-7a8h-zyhh
7
vulnerability VCID-87p8-zvvf-y7dm
8
vulnerability VCID-88v7-kc2y-bfd7
9
vulnerability VCID-99es-8ecb-uub8
10
vulnerability VCID-a9cu-fxqw-xkdg
11
vulnerability VCID-acmu-9eqb-fya5
12
vulnerability VCID-afg3-t31c-ffgp
13
vulnerability VCID-bhq7-d545-27bj
14
vulnerability VCID-bung-pa58-ayfv
15
vulnerability VCID-dcrp-rae1-zfcm
16
vulnerability VCID-fvvt-kufu-k3a6
17
vulnerability VCID-j2sv-62js-xbav
18
vulnerability VCID-mnf8-t3ew-4fgb
19
vulnerability VCID-mp3r-5531-uqg5
20
vulnerability VCID-p45v-qpgg-qqfj
21
vulnerability VCID-peya-mr7j-vugf
22
vulnerability VCID-q7jp-hn4a-4kec
23
vulnerability VCID-qdck-q54n-rkcv
24
vulnerability VCID-qxkf-4ddv-j3b7
25
vulnerability VCID-r1bk-cqhx-ebc5
26
vulnerability VCID-r84b-7ay9-ekcm
27
vulnerability VCID-rwvj-tq6x-2ubs
28
vulnerability VCID-ssnx-gz8e-87ab
29
vulnerability VCID-tcju-3rvu-wkht
30
vulnerability VCID-v94p-bxm3-akfd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.0
1
url pkg:maven/org.apache.tomcat/tomcat@4.1.37
purl pkg:maven/org.apache.tomcat/tomcat@4.1.37
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9cu-fxqw-xkdg
1
vulnerability VCID-acmu-9eqb-fya5
2
vulnerability VCID-qdck-q54n-rkcv
3
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.37
2
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18j8-kwdv-dyak
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-27q8-96un-9fbk
6
vulnerability VCID-2jnv-segx-zkfd
7
vulnerability VCID-4rcx-xfn5-7kdb
8
vulnerability VCID-6epr-2hbd-skcz
9
vulnerability VCID-6p3e-4u8s-17ep
10
vulnerability VCID-7969-7a8h-zyhh
11
vulnerability VCID-7kjm-p97s-zuh8
12
vulnerability VCID-86ur-vudp-4yc2
13
vulnerability VCID-87p8-zvvf-y7dm
14
vulnerability VCID-88v7-kc2y-bfd7
15
vulnerability VCID-8ebv-6941-jqdy
16
vulnerability VCID-a9cu-fxqw-xkdg
17
vulnerability VCID-acmu-9eqb-fya5
18
vulnerability VCID-bhq7-d545-27bj
19
vulnerability VCID-bung-pa58-ayfv
20
vulnerability VCID-d9ys-kxh6-nkgr
21
vulnerability VCID-dcrp-rae1-zfcm
22
vulnerability VCID-dhun-hj5q-dfch
23
vulnerability VCID-egye-da2v-4ybh
24
vulnerability VCID-f2zy-gq57-ufat
25
vulnerability VCID-fvvt-kufu-k3a6
26
vulnerability VCID-g7eg-s99s-xqe7
27
vulnerability VCID-g998-xymt-fudu
28
vulnerability VCID-hhk9-cr54-8fgc
29
vulnerability VCID-mctd-9zgv-5qgp
30
vulnerability VCID-mnf8-t3ew-4fgb
31
vulnerability VCID-n76n-ywja-rbhh
32
vulnerability VCID-peya-mr7j-vugf
33
vulnerability VCID-q7jp-hn4a-4kec
34
vulnerability VCID-qdck-q54n-rkcv
35
vulnerability VCID-quwu-ep21-cyew
36
vulnerability VCID-qxkf-4ddv-j3b7
37
vulnerability VCID-r5rc-rdd9-bfbk
38
vulnerability VCID-r84b-7ay9-ekcm
39
vulnerability VCID-rrdj-ssn7-zfdj
40
vulnerability VCID-rwvj-tq6x-2ubs
41
vulnerability VCID-skar-qk57-qkdv
42
vulnerability VCID-su1y-2bxh-9qe2
43
vulnerability VCID-tcju-3rvu-wkht
44
vulnerability VCID-tfn5-6ckq-wyce
45
vulnerability VCID-v94p-bxm3-akfd
46
vulnerability VCID-vm4b-26sq-tfev
47
vulnerability VCID-wsn2-pd9b-b3g8
48
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
3
url pkg:maven/org.apache.tomcat/tomcat@5.5.26
purl pkg:maven/org.apache.tomcat/tomcat@5.5.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9cu-fxqw-xkdg
1
vulnerability VCID-acmu-9eqb-fya5
2
vulnerability VCID-egup-27ub-6uaf
3
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.26
4
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1qt3-ctae-sfgw
4
vulnerability VCID-1v6c-f56v-hqh1
5
vulnerability VCID-241m-q6vd-kudk
6
vulnerability VCID-27q8-96un-9fbk
7
vulnerability VCID-3cr9-g81m-4ugy
8
vulnerability VCID-3n4t-bvb1-5qer
9
vulnerability VCID-3r3s-q21j-c3au
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-4rcx-xfn5-7kdb
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-6epr-2hbd-skcz
14
vulnerability VCID-6p3e-4u8s-17ep
15
vulnerability VCID-7969-7a8h-zyhh
16
vulnerability VCID-7cpu-h5fr-8ffd
17
vulnerability VCID-7ej8-5f77-cybb
18
vulnerability VCID-7kjm-p97s-zuh8
19
vulnerability VCID-7pd9-1r19-73fe
20
vulnerability VCID-87p8-zvvf-y7dm
21
vulnerability VCID-88v7-kc2y-bfd7
22
vulnerability VCID-8ebv-6941-jqdy
23
vulnerability VCID-95d1-arxd-hkd1
24
vulnerability VCID-a1by-zvtm-akdc
25
vulnerability VCID-a9cu-fxqw-xkdg
26
vulnerability VCID-acmu-9eqb-fya5
27
vulnerability VCID-bung-pa58-ayfv
28
vulnerability VCID-d9ys-kxh6-nkgr
29
vulnerability VCID-dcrp-rae1-zfcm
30
vulnerability VCID-dhun-hj5q-dfch
31
vulnerability VCID-egup-27ub-6uaf
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-g7eg-s99s-xqe7
36
vulnerability VCID-g998-xymt-fudu
37
vulnerability VCID-h9ds-trhx-m7aj
38
vulnerability VCID-hhk9-cr54-8fgc
39
vulnerability VCID-hhkg-mfp5-2kax
40
vulnerability VCID-jau7-gfz8-dkfa
41
vulnerability VCID-jf7u-dvpd-b7f4
42
vulnerability VCID-jtg7-217a-qqhk
43
vulnerability VCID-kagr-74d9-kyhx
44
vulnerability VCID-kgd1-bzst-muh7
45
vulnerability VCID-kzzv-rhya-j7dd
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-mctd-9zgv-5qgp
48
vulnerability VCID-mnf8-t3ew-4fgb
49
vulnerability VCID-mwk8-b5c9-kbb9
50
vulnerability VCID-n76n-ywja-rbhh
51
vulnerability VCID-p4dn-y54m-8fd1
52
vulnerability VCID-p6ch-pc73-b3ck
53
vulnerability VCID-peya-mr7j-vugf
54
vulnerability VCID-qdck-q54n-rkcv
55
vulnerability VCID-quwu-ep21-cyew
56
vulnerability VCID-qxkf-4ddv-j3b7
57
vulnerability VCID-r5rc-rdd9-bfbk
58
vulnerability VCID-r84b-7ay9-ekcm
59
vulnerability VCID-rrdj-ssn7-zfdj
60
vulnerability VCID-rwvj-tq6x-2ubs
61
vulnerability VCID-su1y-2bxh-9qe2
62
vulnerability VCID-t9y6-suc2-2kcg
63
vulnerability VCID-ta1m-dh8x-nubc
64
vulnerability VCID-tcbc-3kgt-muam
65
vulnerability VCID-tcju-3rvu-wkht
66
vulnerability VCID-tfn5-6ckq-wyce
67
vulnerability VCID-tfrs-d458-tfaq
68
vulnerability VCID-twh8-87va-juf9
69
vulnerability VCID-v94p-bxm3-akfd
70
vulnerability VCID-vd1s-m27a-8ucc
71
vulnerability VCID-vm4b-26sq-tfev
72
vulnerability VCID-w82a-7kk2-p3f1
73
vulnerability VCID-wsn2-pd9b-b3g8
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-ygvw-69am-s7ae
76
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
5
url pkg:maven/org.apache.tomcat/tomcat@6.0.16
purl pkg:maven/org.apache.tomcat/tomcat@6.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a9cu-fxqw-xkdg
2
vulnerability VCID-acmu-9eqb-fya5
3
vulnerability VCID-egup-27ub-6uaf
4
vulnerability VCID-hves-r5bg-yfes
5
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.16
6
url pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9cu-fxqw-xkdg
1
vulnerability VCID-acmu-9eqb-fya5
2
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1%3Farch=el4
7
url pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9cu-fxqw-xkdg
1
vulnerability VCID-acmu-9eqb-fya5
2
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.0.0-5.CP07.0jpp.ep1.1%3Farch=el5
8
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=9
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-88v7-kc2y-bfd7
1
vulnerability VCID-a9cu-fxqw-xkdg
2
vulnerability VCID-acmu-9eqb-fya5
3
vulnerability VCID-egup-27ub-6uaf
4
vulnerability VCID-hhkg-mfp5-2kax
5
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=9
9
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_2?arch=1
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_2?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9cu-fxqw-xkdg
1
vulnerability VCID-acmu-9eqb-fya5
2
vulnerability VCID-egup-27ub-6uaf
3
vulnerability VCID-rwvj-tq6x-2ubs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.7.el5_2%3Farch=1
References
0
reference_url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
3
reference_url http://marc.info/?l=bugtraq&m=123376588623823&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=123376588623823&w=2
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2938.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-2938.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2938
reference_id
reference_type
scores
0
value 0.92704
scoring_system epss
scoring_elements 0.99752
published_at 2026-04-13T12:55:00Z
1
value 0.92704
scoring_system epss
scoring_elements 0.9975
published_at 2026-04-02T12:55:00Z
2
value 0.92704
scoring_system epss
scoring_elements 0.99751
published_at 2026-04-04T12:55:00Z
3
value 0.92704
scoring_system epss
scoring_elements 0.99753
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2938
6
reference_url http://secunia.com/advisories/31639
reference_id
reference_type
scores
url http://secunia.com/advisories/31639
7
reference_url http://secunia.com/advisories/31865
reference_id
reference_type
scores
url http://secunia.com/advisories/31865
8
reference_url http://secunia.com/advisories/31891
reference_id
reference_type
scores
url http://secunia.com/advisories/31891
9
reference_url http://secunia.com/advisories/31982
reference_id
reference_type
scores
url http://secunia.com/advisories/31982
10
reference_url http://secunia.com/advisories/32120
reference_id
reference_type
scores
url http://secunia.com/advisories/32120
11
reference_url http://secunia.com/advisories/32222
reference_id
reference_type
scores
url http://secunia.com/advisories/32222
12
reference_url http://secunia.com/advisories/32266
reference_id
reference_type
scores
url http://secunia.com/advisories/32266
13
reference_url http://secunia.com/advisories/33797
reference_id
reference_type
scores
url http://secunia.com/advisories/33797
14
reference_url http://secunia.com/advisories/37297
reference_id
reference_type
scores
url http://secunia.com/advisories/37297
15
reference_url http://securityreason.com/securityalert/4148
reference_id
reference_type
scores
url http://securityreason.com/securityalert/4148
16
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/44411
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/44411
17
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
18
reference_url https://github.com/apache/tomcat/commit/150bc791ac3ba40081425dd1c37a053fbb02b339
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/150bc791ac3ba40081425dd1c37a053fbb02b339
19
reference_url https://github.com/apache/tomcat/commit/c55ad56ed72ee1dbfe790bc5492d4df74e3e754f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/c55ad56ed72ee1dbfe790bc5492d4df74e3e754f
20
reference_url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
23
reference_url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
24
reference_url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
25
reference_url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
26
reference_url https://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
27
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-2938
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2008-2938
28
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587
29
reference_url http://support.apple.com/kb/HT3216
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://support.apple.com/kb/HT3216
30
reference_url http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm
31
reference_url https://web.archive.org/web/20080827130946/http://securityreason.com/securityalert/4148
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20080827130946/http://securityreason.com/securityalert/4148
32
reference_url https://web.archive.org/web/20090201124623/http://secunia.com/advisories/31639
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201124623/http://secunia.com/advisories/31639
33
reference_url https://web.archive.org/web/20090201124633/http://secunia.com/advisories/31891
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201124633/http://secunia.com/advisories/31891
34
reference_url https://web.archive.org/web/20090201124638/http://secunia.com/advisories/32120
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201124638/http://secunia.com/advisories/32120
35
reference_url https://web.archive.org/web/20090201124957/http://secunia.com/advisories/31982
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201124957/http://secunia.com/advisories/31982
36
reference_url https://web.archive.org/web/20090201125002/http://secunia.com/advisories/32266
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201125002/http://secunia.com/advisories/32266
37
reference_url https://web.archive.org/web/20090201141000/http://secunia.com/advisories/32222
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090201141000/http://secunia.com/advisories/32222
38
reference_url https://web.archive.org/web/20090207111236/http://secunia.com/advisories/33797
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090207111236/http://secunia.com/advisories/33797
39
reference_url https://web.archive.org/web/20090308065055/http://secunia.com/advisories/31865
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20090308065055/http://secunia.com/advisories/31865
40
reference_url https://web.archive.org/web/20100516085845/http://secunia.com/advisories/37297
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100516085845/http://secunia.com/advisories/37297
41
reference_url https://web.archive.org/web/20110711210039/http://rhn.redhat.com/errata/RHSA-2008-0862.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110711210039/http://rhn.redhat.com/errata/RHSA-2008-0862.html
42
reference_url https://web.archive.org/web/20110713233239/http://rhn.redhat.com/errata/RHSA-2008-0648.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110713233239/http://rhn.redhat.com/errata/RHSA-2008-0648.html
43
reference_url https://web.archive.org/web/20110713234158/http://rhn.redhat.com/errata/RHSA-2008-0864.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110713234158/http://rhn.redhat.com/errata/RHSA-2008-0864.html
44
reference_url https://web.archive.org/web/20140628064423/http://www.securityfocus.com/archive/1/495318/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140628064423/http://www.securityfocus.com/archive/1/495318/100/0/threaded
45
reference_url https://web.archive.org/web/20140628064448/http://www.securityfocus.com/archive/1/507729/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140628064448/http://www.securityfocus.com/archive/1/507729/100/0/threaded
46
reference_url https://web.archive.org/web/20140826163457/http://www.securityfocus.com/bid/30633
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140826163457/http://www.securityfocus.com/bid/30633
47
reference_url https://web.archive.org/web/20140826171227/http://www.securitytracker.com/id?1020665
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140826171227/http://www.securitytracker.com/id?1020665
48
reference_url https://web.archive.org/web/20140826232500/http://www.securityfocus.com/bid/31681
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140826232500/http://www.securityfocus.com/bid/31681
49
reference_url https://web.archive.org/web/20140827130327/http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140827130327/http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
50
reference_url https://web.archive.org/web/20200612070417/http://marc.info/?l=bugtraq&m=123376588623823&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200612070417/http://marc.info/?l=bugtraq&m=123376588623823&w=2
51
reference_url https://www.exploit-db.com/exploits/6229
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/6229
52
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.html
53
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.html
54
reference_url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html
55
reference_url http://tomcat.apache.org/security-4.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-4.html
56
reference_url http://tomcat.apache.org/security-5.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-5.html
57
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
58
reference_url http://www.kb.cert.org/vuls/id/343355
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.kb.cert.org/vuls/id/343355
59
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2008:188
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2008:188
60
reference_url http://www.redhat.com/support/errata/RHSA-2008-0648.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0648.html
61
reference_url http://www.redhat.com/support/errata/RHSA-2008-0862.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0862.html
62
reference_url http://www.redhat.com/support/errata/RHSA-2008-0864.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0864.html
63
reference_url http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
reference_id
reference_type
scores
url http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
64
reference_url http://www.securityfocus.com/archive/1/495318/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/495318/100/0/threaded
65
reference_url http://www.securityfocus.com/archive/1/507729/100/0/threaded
reference_id
reference_type
scores
url http://www.securityfocus.com/archive/1/507729/100/0/threaded
66
reference_url http://www.securityfocus.com/bid/30633
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/30633
67
reference_url http://www.securityfocus.com/bid/31681
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/31681
68
reference_url http://www.securitytracker.com/id?1020665
reference_id
reference_type
scores
url http://www.securitytracker.com/id?1020665
69
reference_url http://www.vupen.com/english/advisories/2008/2343
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/2343
70
reference_url http://www.vupen.com/english/advisories/2008/2780
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/2780
71
reference_url http://www.vupen.com/english/advisories/2008/2823
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/2823
72
reference_url http://www.vupen.com/english/advisories/2009/0320
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2009/0320
73
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=456120
reference_id 456120
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=456120
74
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
75
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/remote/14489.c
reference_id CVE-2008-2938
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/remote/14489.c
76
reference_url https://github.com/advisories/GHSA-m7xj-ccqc-p4g2
reference_id GHSA-m7xj-ccqc-p4g2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m7xj-ccqc-p4g2
77
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/6229.txt
reference_id OSVDB-47464;CVE-2008-2938
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/6229.txt
Weaknesses
0
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Exploits
0
date_added 2010-07-28
description Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2010-07-28
exploit_type remote
platform unix
source_date_updated 2017-03-30
data_source Exploit-DB
source_url
1
date_added null
description 
This module tests whether a directory traversal vulnerability is present
        in Trend Micro DLP (Data Loss Prevention) Appliance v5.5 build <= 1294.
        The vulnerability appears to be actually caused by the Tomcat UTF-8
        bug which is implemented in module tomcat_utf8_traversal CVE 2008-2938.
        This module simply tests for the same bug with Trend Micro specific settings.
        Note that in the Trend Micro appliance, /etc/shadow is not used and therefore
        password hashes are stored and anonymously accessible in the passwd file.
required_action null
due_date null
notes 
Stability:
  - crash-safe
SideEffects:
  - ioc-in-logs
Reliability: []
known_ransomware_campaign_use false
source_date_published 2009-01-09
exploit_type null
platform
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/admin/http/trendmicro_dlp_traversal.rb
Severity_range_score4.0 - 6.9
Exploitability2.0
Weighted_severity6.2
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-rwvj-tq6x-2ubs