Description

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

Remediation

References

CVE-2006-3835

Related Vulnerabilities

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36806)

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-47283)

WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Security Bypass (2.17.0)

Joomla Other Vulnerability (CVE-2005-3773)

WordPress Plugin WP Fastest Cache SQL Injection (0.8.7.4)

Severity

Medium

Classification

CVE-2006-3835

Tags

Missing Update Known Vulnerabilities