CVE-2009-2693
Apache Tomcat Directory Traversal vulnerability
5.8 MediumFix available
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
Exploit likelihood
9.64%Up 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
- Record
CVE-2009-2693- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
- Record
CVE-2009-2693- Updated
- 2026-11-02
EUVDEUVD-2022-3958 No score
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
- Record
EUVD-2022-3958- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggx9-4728-588r No score
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
- Record
GHSA-ggx9-4728-588r- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-ggx9-4728-588r No score
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
- Record
GHSA-ggx9-4728-588r- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
5.5.0 to 5.5.28 | 5.5.29 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.24 | 6.0.24 |
tomcat5.5Debian:5.0 |
before 5.5.26-5lenny2, plus listed versions 5.5.26-5 |
5.5.26-5lenny2 |
org.apache.tomcat:tomcatMaven |
5.5.0 up to 5.5.29 | 5.5.29 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2_13-2.ep5.el4 | 0:1.2_13-2.ep5.el4 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
Show 124 moreShow less
| Package | Affected | Fixed |
|---|---|---|
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
httpd22-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.14-4.ep5.el4 | 0:2.2.14-4.ep5.el4 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2-2.1.ep5.el4 | 0:1.2-2.1.ep5.el4 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.8.1-7.ep5.el4 | 0:1.8.1-7.ep5.el4 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.4-1.ep5.el4 | 0:1.4-1.ep5.el4 |
jakarta-commons-modelerRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0-3.3.ep5.el4 | 0:2.0-3.3.ep5.el4 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3.1-7.4.ep5.el4 | 0:1.3.1-7.4.ep5.el4 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0.8-3jpp.ep1.3.ep5.el4 | 0:2.0.8-3jpp.ep1.3.ep5.el4 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.3.ep5.el4 | 0:5.0.1-2.3.ep5.el4 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.28-4.ep5.el4 | 0:1.2.28-4.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:2.2.14-4.ep5.el4 | 1:2.2.14-4.ep5.el4 |
struts12Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.9-2.ep5.el4 | 0:1.2.9-2.ep5.el4 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.19-2.0.ep5.el4 | 0:1.1.19-2.0.ep5.el4 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.19-2.0.ep5.el4 | 0:1.1.19-2.0.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-7.ep5.el4 | 0:5.5.28-7.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.24-2.ep5.el4 | 0:6.0.24-2.ep5.el4 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.9.1-2.2_patch_01.ep5.el4 | 0:2.9.1-2.2_patch_01.ep5.el4 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.2-1.1.ep5.el4 | 1:1.2-1.1.ep5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2_13-3.ep5.el5 | 0:1.2_13-3.ep5.el5 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.14-1.2.1.ep5.el5 | 0:2.2.14-1.2.1.ep5.el5 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2-2.1.1.ep5.el5 | 0:1.2-2.1.1.ep5.el5 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.4-1.1.ep5.el5 | 0:1.4-1.1.ep5.el5 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.0.8-3.1.ep5.el5 | 0:2.0.8-3.1.ep5.el5 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.28-4.1.ep5.el5 | 0:1.2.28-4.1.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:2.2.14-1.2.1.ep5.el5 | 1:2.2.14-1.2.1.ep5.el5 |
struts12Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.9-2.ep5.el5 | 0:1.2.9-2.ep5.el5 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.19-2.0.1.ep5.el5 | 0:1.1.19-2.0.1.ep5.el5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-7.1.ep5.el5 | 0:5.5.28-7.1.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.24-2.1.ep5.el5 | 0:6.0.24-2.1.ep5.el5 |
tomcat5Red Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:enterprise_linux:5::client |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-common-libRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasperRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-server-libRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5-webappsRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.9.el5_5 | 0:5.5.23-0jpp.9.el5_5 |
tomcat5Red Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-common-libRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jasperRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-server-libRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5-webappsRed Hat:rhel_application_server:2 |
before 0:5.5.23-0jpp_4rh.17 | 0:5.5.23-0jpp_4rh.17 |
tomcat5Red Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-common-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-jasperRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-server-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.19 | 0:5.5.23-0jpp_4rh.19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2693 is a medium vulnerability (CVSS 5.8) in Apache Tomcat, published January 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.64%, the 95th percentile. Fixed in org.apache.tomcat:tomcat 5.5.29.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113
marc.info?l=bugtraq&m=127420533226623&w=2
svn.apache.org/viewvc?rev=892815&view=rev
secunia.com/advisories/39317
debian.org/security/2011/dsa-2207
lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
Show 93 moreShow less
mandriva.com/security/advisories?name=MDVSA-2010:177
securitytracker.com/id?1023505
exchange.xforce.ibmcloud.com/vulnerabilities/55855
vupen.com/english/advisories/2010/1559
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
securityfocus.com/bid/37944
redhat.com/support/errata/RHSA-2010-0580.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017
tomcat.apache.org/security-6.html
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
ubuntu.com/usn/usn-899-1
support.apple.com/kb/HT4077
lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-2693
web.archive.org/web/20200229071135/http://www.securityfocus.com/bid/37944
github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
access.redhat.com/errata/RHSA-2010:0119
support.hpe.com/hpesc/public/docDisplay?docId=c02241113
kbase.redhat.com/faq/docs/DOC-20491
bugzilla.redhat.com/show_bug.cgi?id=533125
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0119.json
cve.org/CVERecord?id=CVE-2009-2693