VulnerableCode Advisory Details - GHSA-8wch-9gcg-v2pr

System	Score	Found at
generic_textual	MODERATE

Reference id	Reference type	URL
		http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
		http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
		http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
		http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
		http://marc.info/?l=bugtraq&m=127420533226623&w=2
		http://marc.info/?l=bugtraq&m=133469267822771&w=2
		http://marc.info/?l=bugtraq&m=136485229118404&w=2
		http://marc.info/?l=bugtraq&m=139344343412337&w=2
		https://exchange.xforce.ibmcloud.com/vulnerabilities/55857
		https://github.com/apache/tomcat
		https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421
		https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
		https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
		https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
		https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
		https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
		https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19431
		https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7092
		https://support.apple.com/kb/HT4077
		https://support.hpe.com/hpesc/public/docDisplay?docId=c02241113
		http://svn.apache.org/viewvc?rev=892815&view=rev
		http://svn.apache.org/viewvc?rev=902650&view=rev
		https://web.archive.org/web/20100127015355/http://secunia.com/advisories/38346
		https://web.archive.org/web/20100127190258/http://secunia.com/advisories/38316
		https://web.archive.org/web/20100329100145/http://secunia.com/advisories/38687
		https://web.archive.org/web/20100412065745/http://secunia.com/advisories/39317
		https://web.archive.org/web/20100601000000*/http://secunia.com/advisories/40813
		https://web.archive.org/web/20110213053623/https://secunia.com/advisories/43310
		https://web.archive.org/web/20110529135656/http://secunia.com/advisories/38541
		https://web.archive.org/web/20110601000000*/http://secunia.com/advisories/40330
		https://web.archive.org/web/20111119150528/http://www.securityfocus.com/archive/1/516397/100/0/threaded
		https://web.archive.org/web/20121211115829/http://securitytracker.com/id?1023504
		https://web.archive.org/web/20121211195847/http://www.securityfocus.com/bid/37945
		https://web.archive.org/web/20140515000000*/http://secunia.com/advisories/57126
		https://web.archive.org/web/20150308000602/http://www.securityfocus.com/archive/1/509150/100/0/threaded
		http://tomcat.apache.org/security-5.html
		http://tomcat.apache.org/security-6.html
		http://ubuntu.com/usn/usn-899-1
		http://www.debian.org/security/2011/dsa-2207
		http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
		http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
CVE-2009-2902		https://nvd.nist.gov/vuln/detail/CVE-2009-2902
msg00001.html	Advisory	http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
RHSA-2010:0119		https://access.redhat.com/errata/RHSA-2010:0119
RHSA-2010:0580		https://access.redhat.com/errata/RHSA-2010:0580
RHSA-2010:0582		https://access.redhat.com/errata/RHSA-2010:0582
VMSA-2011-0003.html	Other	http://www.vmware.com/security/advisories/VMSA-2011-0003.html
vsp_vc41_u1_rel_notes.html	Other	http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

No EPSS data available for this advisory.

Advisory ID	github_osv/GHSA-8wch-9gcg-v2pr
Aliases	CVE-2009-2902
Summary	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details