CVE-2009-2693

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files…

published January 28, 2010

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09638 · 95.5th percentile
Published
2010-01-28T20:00Z
EPSS history
Timeline
  • 28 JAN 20:00Z
    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files…
    cvelistv5