CVE-2008-2938: apache tomcat

Modified

AliasesGHSA-m7xj-ccqc-p4g2

Published 13-08-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-2938 is a medium (CVSS 4.3) vulnerability in apache tomcat. EPSS estimates a 99.71% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 4 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 28-07-2010)

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

99.71%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits4exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 5

RHSA-2008:0648 RHSA-2008:0862 RHSA-2008:0864 RHSA-2008:0877 RHSA-2008:1007

Timeline

13-08-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

99.71%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 99.71% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

4 found

exploit-databaseremotemultipleVerified
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal (PoC)
Maturity: weaponized
exploit-databaseremoteunixVerified
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal
Maturity: weaponized
MetasploitremoteUnverified
Tomcat UTF-8 Directory Traversal Vulnerability
auxiliary/admin/http/tomcat_utf8_traversal
Maturity: poc

Show all 4 exploits

MetasploitremoteUnverified
TrendMicro Data Loss Prevention 5.5 Directory Traversal
auxiliary/admin/http/trendmicro_dlp_traversal
Maturity: poc

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted DirectoryThe product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apache1 product

tomcat≥ 4.0.0, ≤ 4.1.37 | ≥ 5.0.0, ≤ 5.5.26 | ≥ 6.0.0, ≤ 6.0.16

Org.apache.tomcat1 product

tomcat≥ 4.1.0, < 4.1.39 | ≥ 5.5.0, < 5.5.27 | ≥ 6.0.0, < 6.0.18

2 vendors · 2 products

References

70 links

tomcat.apache.org/security-4.htmlX Refsource CONFIRMVendor AdvisoryWEB
secunia.com/advisories/37297Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2008-0862.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2008/2823VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/31982Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/31681VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/32120Third Party AdvisoryX Refsource SECUNIABroken Link
www.kb.cert.org/vuls/id/343355Third Party AdvisoryX Refsource CERT VNUS Government ResourceWEB
exchange.xforce.ibmcloud.com/vulnerabilities/44411VDB EntryX Refsource XFThird Party AdvisoryWEB
secunia.com/advisories/31865Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 70 references

www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.htmlVendor AdvisoryX Refsource FEDORAThird Party AdvisoryWEB
secunia.com/advisories/31639Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10587VDB EntrySignatureX Refsource OVALTool SignatureWEB
www.securitytracker.com/id?1020665VDB EntryX Refsource SECTRACKThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:188Vendor AdvisoryX Refsource MANDRIVAThird Party AdvisoryWEB
support.avaya.com/elmodocs2/security/ASA-2008-401.htmX Refsource CONFIRMThird Party AdvisoryWEB
www.vupen.com/english/advisories/2009/0320VDB EntryX Refsource VUPENThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0864.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2008/2343VDB EntryX Refsource VUPENThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
www.exploit-db.com/exploits/6229ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB EntryWEB
tomcat.apache.org/security-6.htmlX Refsource CONFIRMVendor AdvisoryWEB
www.securityfocus.com/bid/30633VDB EntryX Refsource BIDThird Party Advisory
www.securityfocus.com/archive/1/507729/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/32222Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/31891Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/33797Third Party AdvisoryX Refsource SECUNIABroken Link
securityreason.com/securityalert/4148Third Party AdvisoryX Refsource SREASON
www.redhat.com/archives/fedora-package-announce/2008-September/msg00712.htmlVendor AdvisoryX Refsource FEDORAThird Party AdvisoryWEB
www.securityfocus.com/archive/1/495318/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.redhat.com/archives/fedora-package-announce/2008-September/msg00859.htmlVendor AdvisoryX Refsource FEDORAThird Party AdvisoryWEB
tomcat.apache.org/security-5.htmlX Refsource CONFIRMVendor AdvisoryWEB
www.vupen.com/english/advisories/2008/2780VDB EntryX Refsource VUPENThird Party Advisory
marc.info?l=bugtraq&m=123376588623823&w=2Vendor AdvisoryX Refsource HPThird Party Advisory
www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txtX Refsource MISCThird Party Advisory
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
support.apple.com/kb/HT3216X Refsource CONFIRMThird Party AdvisoryWEB
secunia.com/advisories/32266Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2008-0648.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLISTWEB
nvd.nist.gov/vuln/detail/CVE-2008-2938Advisory
github.com/apache/tomcat/commit/c55ad56ed72ee1dbfe790bc5492d4df74e3e754fWEB
web.archive.org/web/20090207111236/http://secunia.com/advisories/33797WEB
web.archive.org/web/20090308065055/http://secunia.com/advisories/31865WEB
web.archive.org/web/20100516085845/http://secunia.com/advisories/37297WEB
web.archive.org/web/20110711210039/http://rhn.redhat.com/errata/RHSA-2008-0862.htmlWEB
web.archive.org/web/20110713233239/http://rhn.redhat.com/errata/RHSA-2008-0648.htmlWEB
web.archive.org/web/20110713234158/http://rhn.redhat.com/errata/RHSA-2008-0864.htmlWEB
web.archive.org/web/20140628064423/http://www.securityfocus.com/archive/1/495318/100/0/threadedWEB
web.archive.org/web/20140628064448/http://www.securityfocus.com/archive/1/507729/100/0/threadedWEB
web.archive.org/web/20140826163457/http://www.securityfocus.com/bid/30633WEB
web.archive.org/web/20140826171227/http://www.securitytracker.com/id?1020665WEB
web.archive.org/web/20140826232500/http://www.securityfocus.com/bid/31681WEB
web.archive.org/web/…WEB
web.archive.org/web/20200612070417/http://marc.info/?l=bugtraq&m=123376588623823&w=2WEB
github.com/apache/tomcatPACKAGE
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apache.org/thread.html/…WEB
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlWEB
web.archive.org/web/20080827130946/http://securityreason.com/securityalert/4148WEB
web.archive.org/web/20090201124623/http://secunia.com/advisories/31639WEB
web.archive.org/web/20090201124633/http://secunia.com/advisories/31891WEB
web.archive.org/web/20090201124638/http://secunia.com/advisories/32120WEB
web.archive.org/web/20090201124957/http://secunia.com/advisories/31982WEB
web.archive.org/web/20090201125002/http://secunia.com/advisories/32266WEB
web.archive.org/web/20090201141000/http://secunia.com/advisories/32222WEB