CVE-2007-5461: Path Traversal
Published Oct 15, 2007
·Updated
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
Affected Software
49 affected components
maven/org.apache.tomcat:tomcat>=6.0.0<=6.0.14
maven/org.apache.tomcat:tomcat>=5.5.0<=5.5.25
maven/org.apache.tomcat:tomcat=5.0.0
maven/org.apache.tomcat:tomcat=4.1.0
maven/org.apache.tomcat:tomcat>=4.0.0<=4.0.6
Apache Tomcat=4.0.0
Apache Tomcat=4.0.1
Apache Tomcat=4.0.2
Apache Tomcat=4.0.3
Apache Tomcat=4.0.4
Apache Tomcat=4.0.5
Apache Tomcat=4.0.6
Apache Tomcat=4.1.0
Apache Tomcat=4.1.1
Apache Tomcat=4.1.2
Apache Tomcat=4.1.3
Apache Tomcat=4.1.4
Apache Tomcat=4.1.5
Apache Tomcat=4.1.6
Apache Tomcat=4.1.7
Apache Tomcat=4.1.8
Apache Tomcat=4.1.9
Apache Tomcat=4.1.10
Apache Tomcat=4.1.11
Apache Tomcat=4.1.12
Apache Tomcat=4.1.13
Apache Tomcat=4.1.14
Apache Tomcat=4.1.15
Apache Tomcat=4.1.16
Apache Tomcat=4.1.17
Apache Tomcat=4.1.18
Apache Tomcat=4.1.19
Apache Tomcat=4.1.20
Apache Tomcat=4.1.21
Apache Tomcat=4.1.22
Apache Tomcat=4.1.23
Apache Tomcat=4.1.24
Apache Tomcat=4.1.25
Apache Tomcat=4.1.26
Apache Tomcat=4.1.27
Apache Tomcat=4.1.28
Apache Tomcat=4.1.29
Apache Tomcat=4.1.30
Apache Tomcat=4.1.31
Apache Tomcat=4.1.32
Apache Tomcat=4.1.33
Apache Tomcat=4.1.34
Apache Tomcat=4.1.35
Apache Tomcat=4.1.36
Event History
Oct 15, 2007
CVE Published
06:17 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
May 1, 2022
Advisory Published
06:33 PM
Frequently Asked Questions
1
What is the severity of CVE-2007-5461?
CVE-2007-5461 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2007-5461?
To fix CVE-2007-5461, upgrade Apache Tomcat to version 6.0.15 or later.
3
Which versions of Apache Tomcat are affected by CVE-2007-5461?
CVE-2007-5461 affects Apache Tomcat versions 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14.
4
What types of users can exploit CVE-2007-5461?
CVE-2007-5461 can be exploited by remote authenticated users.
5
What is an absolute path traversal vulnerability in the context of CVE-2007-5461?
An absolute path traversal vulnerability allows an attacker to read arbitrary files from the server by using manipulated input.