CERT-MU :Advisories

Home | Search | FAQ | Site Map | Contact Us

|| Hotline : 800 2378 || To contact CERT-MU send e-mail on --> info[at]cert-mu.gov.mu || To report incident e-mail on --> incident[at]cert-mu.gov.mu || To report Vulnerabilities send e-mail on --> Vulnerability[at]cert-mu.gov.mu ||

Charter & Mission

CERT-MU Services

Constituency

Authority

Incident Reporting

Vulnerability Reporting

Incident Statistics Forms

Vol. 2, Feb 2012

Vol. 1, Oct 2011

World CERTs

Security Sites

Security Tools

Antivirus Resources

Email Abuse

Network Abuse

Anti-Spam Initiative

Cyber Security Portal

Safer Internet Day

Computer Security Day

National Computer Board

Authorized to use CERT(TM) - CERT is a mark owned by Carnegie Mellon University

CERT-MU AD-2010-2

Multiple Vulnerabilities in Apache Tomcat

Original issue date: 3 February, 2010

Overview

Multiple vulnerabilities have been reported in Apache Tomcat that could allow a remote attacker to traverse directories on the system, caused by an error when deploying WAR files.

Description

Apache Tomcat WAR File Directory Traversal Vulnerability

An input validation error has been reported in Apache Tomcat while deploying WAR files, the WAR files were not checked for directory traversal attempts. This allows an attacker to delete files within the host's work directory or create arbitrary files outside of the web root.

Apache Tomcat WAR Deployment Directory Traversal Vulnerability

An error has been reported when deploying WAR files, after a failed undeploy. A remote attacker could exploit this vulnerability by creating a specially crafted WAR archived that, when deployed on the target system by an authorized user, will overwrite files on the affected system.. Successful exploitation of this vulnerability could allow a remote attacker to cause Denial of Service (DoS) condition.

Apache Tomcat Undeploy Failure Vulnerability

This vulnerability is caused due to an error in setting the autoDeploy attribute for directories placed in the hosts's appBase. This error will fails the undeploying process and some arbitrary files are autodeployed with improper access restrictions. A remote attacker could exploit this vulnerability to bypass security restrictions to gain unauthorized access to the normally restricted files.

Software Affected