cve/2007/CVE-2007-5461.md at 2ed73860289a34fffca6476bd9a99b0050a33683

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

0xMarcio e9a692de92 Remove links to the retired CIS OVAL Repository

Thirty of thirty sampled returned 404: the service is gone, so all 942
links across 911 entries are permanently dead. 576 entries held nothing
else and drop out of the search index rather than offering a reader a
guaranteed miss.

2026-08-31 00:27:36 +02:00

Description

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.

POC

Reference

http://www.redhat.com/support/errata/RHSA-2008-0862.html
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
https://www.exploit-db.com/exploits/4530

Github

No PoCs found on GitHub currently.

891 B Raw Blame History

CVE-2007-5461

Description

POC

Reference

Github

891 B

Raw Blame History