NVD Vulnerability Detail

CVE-2007-5461

Summary	Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
Publication Date	Oct. 16, 2007, 3:17 a.m.
Registration Date	Jan. 29, 2021, 2:22 p.m.
Last Update	Nov. 7, 2023, 11:01 a.m.

CVSS2.0 : LOW
Score	3.5
Vector	AV:N/AC:M/Au:S/C:P/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	単一
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:4.1.2:::::::*
cpe:2.3:a:apache:tomcat:4.0.4:::::::*
cpe:2.3:a:apache:tomcat:4.1.35:::::::*
cpe:2.3:a:apache:tomcat:4.1.36:::::::*
cpe:2.3:a:apache:tomcat:4.1.21:::::::*
cpe:2.3:a:apache:tomcat:4.1.24:::::::*
cpe:2.3:a:apache:tomcat:4.1.25:::::::*
cpe:2.3:a:apache:tomcat:4.1.4:::::::*
cpe:2.3:a:apache:tomcat:4.1.27:::::::*
cpe:2.3:a:apache:tomcat:4.1.30:::::::*
cpe:2.3:a:apache:tomcat:4.1.7:::::::*
cpe:2.3:a:apache:tomcat:4.1.11:::::::*
cpe:2.3:a:apache:tomcat:4.1.18:::::::*
cpe:2.3:a:apache:tomcat:4.1.14:::::::*
cpe:2.3:a:apache:tomcat:4.1.19:::::::*
cpe:2.3:a:apache:tomcat:4.1.31:::::::*
cpe:2.3:a:apache:tomcat:4.1.16:::::::*
cpe:2.3:a:apache:tomcat:4.1.29:::::::*
cpe:2.3:a:apache:tomcat:4.1.22:::::::*
cpe:2.3:a:apache:tomcat:4.0.6:::::::*
cpe:2.3:a:apache:tomcat:4.1.5:::::::*
cpe:2.3:a:apache:tomcat:4.1.26:::::::*
cpe:2.3:a:apache:tomcat:4.1.13:::::::*
cpe:2.3:a:apache:tomcat:4.1.8:::::::*
cpe:2.3:a:apache:tomcat:4.0.3:::::::*
cpe:2.3:a:apache:tomcat:4.1.17:::::::*
cpe:2.3:a:apache:tomcat:4.0.1:::::::*
cpe:2.3:a:apache:tomcat:4.1.33:::::::*
cpe:2.3:a:apache:tomcat:4.1.1:::::::*
cpe:2.3:a:apache:tomcat:4.1.12:::::::*
cpe:2.3:a:apache:tomcat:4.1.28:::::::*
cpe:2.3:a:apache:tomcat:4.1.15:::::::*
cpe:2.3:a:apache:tomcat:4.1.10:::::::*
cpe:2.3:a:apache:tomcat:4.1.0:::::::*
cpe:2.3:a:apache:tomcat:4.1.20:::::::*
cpe:2.3:a:apache:tomcat:4.0.2:::::::*
cpe:2.3:a:apache:tomcat:4.1.3:::::::*
cpe:2.3:a:apache:tomcat:4.0.5:::::::*
cpe:2.3:a:apache:tomcat:4.1.23:::::::*
cpe:2.3:a:apache:tomcat:4.0.0:::::::*
cpe:2.3:a:apache:tomcat:4.1.34:::::::*
cpe:2.3:a:apache:tomcat:4.1.32:::::::*
cpe:2.3:a:apache:tomcat:4.1.6:::::::*
cpe:2.3:a:apache:tomcat:4.1.9:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://marc.info/?l=full-disclosure&m=119239530508382	FULLDISC	Exploit
2	http://issues.apache.org/jira/browse/GERONIMO-3549	MISC
3	http://tomcat.apache.org/security-4.html	CONFIRM
4	http://tomcat.apache.org/security-5.html	CONFIRM
5	http://tomcat.apache.org/security-6.html	CONFIRM
6	http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html	CONFIRM
7	http://www-1.ibm.com/support/docview.wss?uid=swg21286112	CONFIRM
8	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html	FEDORA
9	http://www.securityfocus.com/bid/26070	BID
10	http://www.securitytracker.com/id?1018864	SECTRACK
11	http://secunia.com/advisories/27398	SECUNIA
12	http://secunia.com/advisories/27446	SECUNIA
13	http://secunia.com/advisories/27481	SECUNIA
14	http://secunia.com/advisories/27727	SECUNIA
15	http://www.debian.org/security/2008/dsa-1447	DEBIAN
16	http://www.debian.org/security/2008/dsa-1453	DEBIAN
17	http://www.mandriva.com/security/advisories?name=MDKSA-2007:241	MANDRIVA
18	http://secunia.com/advisories/28317	SECUNIA
19	http://secunia.com/advisories/28361	SECUNIA
20	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html	SUSE
21	http://secunia.com/advisories/29242	SECUNIA
22	http://www.redhat.com/support/errata/RHSA-2008-0042.html	REDHAT
23	http://secunia.com/advisories/29313	SECUNIA
24	http://security.gentoo.org/glsa/glsa-200804-10.xml	GENTOO
25	http://secunia.com/advisories/29711	SECUNIA
26	http://www.redhat.com/support/errata/RHSA-2008-0195.html	REDHAT
27	http://www.redhat.com/support/errata/RHSA-2008-0261.html	REDHAT
28	http://www.vmware.com/security/advisories/VMSA-2008-0010.html	CONFIRM
29	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1	SUNALERT
30	http://secunia.com/advisories/30676	SECUNIA
31	http://secunia.com/advisories/30802	SECUNIA
32	http://secunia.com/advisories/31493	SECUNIA
33	http://support.apple.com/kb/HT2163	CONFIRM
34	http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html	APPLE
35	http://rhn.redhat.com/errata/RHSA-2008-0630.html	REDHAT
36	http://secunia.com/advisories/30899	SECUNIA
37	http://secunia.com/advisories/30908	SECUNIA
38	http://www.redhat.com/support/errata/RHSA-2008-0862.html	REDHAT
39	http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html	APPLE
40	http://www.securityfocus.com/bid/31681	BID
41	http://support.apple.com/kb/HT3216	CONFIRM
42	http://secunia.com/advisories/32222	SECUNIA
43	http://support.avaya.com/elmodocs2/security/ASA-2008-401.htm	CONFIRM
44	http://secunia.com/advisories/32120	SECUNIA
45	http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	SUSE
46	http://secunia.com/advisories/32266	SECUNIA
47	http://www.mandriva.com/security/advisories?name=MDVSA-2009:136	MANDRIVA
48	http://www.vmware.com/security/advisories/VMSA-2009-0016.html	CONFIRM
49	http://www.vupen.com/english/advisories/2009/3316	VUPEN
50	http://secunia.com/advisories/37460	SECUNIA
51	http://www.vupen.com/english/advisories/2007/3674	VUPEN
52	http://www.vupen.com/english/advisories/2007/3671	VUPEN
53	http://www.vupen.com/english/advisories/2008/1979/references	VUPEN
54	http://www.vupen.com/english/advisories/2008/1981/references	VUPEN
55	http://www.vupen.com/english/advisories/2008/1856/references	VUPEN
56	http://www.vupen.com/english/advisories/2008/2780	VUPEN
57	http://www.vupen.com/english/advisories/2007/3622	VUPEN
58	http://www.vupen.com/english/advisories/2008/2823	VUPEN
59	http://marc.info/?l=bugtraq&m=139344343412337&w=2	HP
60	http://secunia.com/advisories/57126	SECUNIA
61	https://exchange.xforce.ibmcloud.com/vulnerabilities/37243	XF
62	https://www.exploit-db.com/exploits/4530	EXPLOIT-DB
63	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9202	OVAL
64	http://www.securityfocus.com/archive/1/507985/100/0/threaded	BUGTRAQ
65	http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705%40apache.org%3E
66	https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
67	https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
68	https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
69	https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
70	https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
71	https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
72	https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-22	パス・トラバーサル	https://cwe.mitre.org/data/definitions/22.html

JVN Vulnerability Information

Apache Tomcat の WebDAV servlet における情報漏えいの脆弱性

Title	Apache Tomcat の WebDAV servlet における情報漏えいの脆弱性
Summary	Apache Tomcat の WebDAV servlet には、書き込みが有効にされている場合、WebDAV リクエストの処理に不備があり、任意のファイルの情報が漏えいする脆弱性が存在します。
Possible impacts	システム上のファイルの重要な情報を奪取される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 15, 2007, midnight
Registration Date	Oct. 31, 2007, 3:43 p.m.
Last Update	March 5, 2015, 6:27 p.m.

Affected System

サン・マイクロシステムズ

Sun Solaris 10 (sparc)

Sun Solaris 10 (x86)

Sun Solaris 9 (sparc)

Sun Solaris 9 (x86)

レッドハット

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 5.0 (client)

RHEL Desktop Workstation 5 (client)

ヒューレット・パッカード

HP XP P9000 Performance Advisor ソフトウェア 5.4.1 未満

Apache Software Foundation

Apache Tomcat 4.0.0 から 4.0.6 のバージョン

Apache Tomcat 4.1.0 から 4.1.SVN のバージョン

Apache Tomcat 5.0.0 から 5.0.SVN のバージョン

Apache Tomcat 5.5.0 から 5.5.25 のバージョン

Apache Tomcat 6.0.0 から 6.0.14 のバージョン

サイバートラスト株式会社

Asianux Server 2.0

Asianux Server 2.1

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

アップル

Apple Mac OS X v10.4.11

Apple Mac OS X Server v10.4.11

Apple Mac OS X Server v10.5.5

VMware

VMware ESX 3.0.3

VMware ESX 3.5

VMware ESX 4.0

VMware Server 2.x

VMware vCenter 4.0

VMware VirtualCenter 2.0.2

VMware VirtualCenter 2.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2007-5461	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461
National Vulnerability Database (NVD)
2	CVE-2007-5461	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-5461

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-22	https://jvndb.jvn.jp/ja/cwe/CWE-22.html

ベンダー情報

No	Name	URL
Apache Geronimo
1	Potential vulnerability in Apache Tomcat Webdav servlet	http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html
Apache Tomcat
2	Fixed in Apache Tomcat 4.1.37	http://tomcat.apache.org/security-4.html
3	Fixed in Apache Tomcat 5.5.SVN	http://tomcat.apache.org/security-5.html
4	Fixed in Apache Tomcat 6.0.SVN	http://tomcat.apache.org/security-6.html
Apple Security Updates
5	HT2163	http://support.apple.com/kb/HT2163
6	HT3216	http://support.apple.com/kb/HT3216
Apple セキュリティアップデート
7	HT2163	http://support.apple.com/kb/HT2163?viewlocale=ja_JP
8	HT3216	http://support.apple.com/kb/HT3216?viewlocale=ja_JP
Asianux Technical Support Network
9	tomcat5-5.5.23-0jpp.3.0.3.1AX	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=117
HP セキュリティ報告
10	HPSBST02955 SSRT101157	http://h20000.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04047415
MIRACLE LINUX アップデート情報
11	tomcat4 (V2.x)	http://www.miraclelinux.com/update/linux/list.php?errata_id=1253
Red Hat Security Advisory
12	RHSA-2008:0042	https://rhn.redhat.com/errata/RHSA-2008-0042.html
13	RHSA-2008:0862	https://rhn.redhat.com/errata/RHSA-2008-0862.html
Sun Alert Notification
14	239312	http://sunsolve.sun.com/search/document.do?assetkey=1-66-239312-1
VMware Security Advisories
15	VMSA-2008-0010.3	http://www.vmware.com/security/advisories/VMSA-2008-0010.html
16	VMSA-2009-0016	http://www.vmware.com/security/advisories/VMSA-2009-0016.html

その他

No	Name	URL
FrSIRT Advisories
1	FrSIRT/ADV-2007-3622	http://www.frsirt.com/english/advisories/2007/3622
ISS X-Force Database
2	37243	http://xforce.iss.net/xforce/xfdb/37243
Secunia Advisory
3	SA27398	http://secunia.com/advisories/27398/
SecurityFocus
4	26070	http://www.securityfocus.com/bid/26070
関連文書
5	ASA-2008-401 (RHSA-2008-0862)	https://downloads.avaya.com/elmodocs2/security/ASA-2008-401.htm

Change Log

No	Changed Details	Date of change
0	[2007年10月31日] 掲載 [2008年03月24日] 影響を受けるシステム：ミラクル・リナックス (tomcat4 (V2.x)) の情報追加。影響を受けるシステム：レッドハット (RHSA-2008:0042) の情報追加。ベンダ情報：ミラクル・リナックス (tomcat4 (V2.x)) 追加。ベンダ情報：レッドハット (RHSA-2008:0042) を追加。 [2008年04月21日] 影響を受けるシステム：ミラクル・リナックス (tomcat5-5.5.23-0jpp.3.0.3.1AX) の情報追加。ベンダ情報: ミラクル・リナックス (tomcat5-5.5.23-0jpp.3.0.3.1AX) 追加。 [2008年07月11日] 影響を受けるシステム：サン・マイクロシステムズ(239312) の情報を追加影響を受けるシステム：アップル (HT2163) の情報を追加ベンダ情報：サン・マイクロシステムズ(239312) を追加ベンダ情報：アップル (HT2163) を追加 [2008年11月04日] 影響を受けるシステム：アップル（HT3216）の情報を追加ベンダ情報：アップル（HT3216）を追加 [2010年01月05日] 影響を受けるシステム：VMware (VMSA-2009-0016) の情報を追加ベンダ情報：VMware (VMSA-2009-0016) を追加 [2015年03月05日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード (HPSBST02955 SSRT101157) を追加ベンダ情報：Apache Software Foundation (Potential vulnerability in Apache Tomcat Webdav servlet) を追加ベンダ情報：VMware (VMSA-2008-0010.3) を追加ベンダ情報：VMware (RHSA-2008:0862) を追加参考情報：関連文書 (ASA-2008-401 (RHSA-2008-0862)) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:apache:tomcat:4.1.2:::::::*
cpe:2.3:a:apache:tomcat:4.0.4:::::::*
cpe:2.3:a:apache:tomcat:4.1.35:::::::*
cpe:2.3:a:apache:tomcat:4.1.36:::::::*
cpe:2.3:a:apache:tomcat:4.1.21:::::::*
cpe:2.3:a:apache:tomcat:4.1.24:::::::*
cpe:2.3:a:apache:tomcat:4.1.25:::::::*
cpe:2.3:a:apache:tomcat:4.1.4:::::::*
cpe:2.3:a:apache:tomcat:4.1.27:::::::*
cpe:2.3:a:apache:tomcat:4.1.30:::::::*
cpe:2.3:a:apache:tomcat:4.1.7:::::::*
cpe:2.3:a:apache:tomcat:4.1.11:::::::*
cpe:2.3:a:apache:tomcat:4.1.18:::::::*
cpe:2.3:a:apache:tomcat:4.1.14:::::::*
cpe:2.3:a:apache:tomcat:4.1.19:::::::*
cpe:2.3:a:apache:tomcat:4.1.31:::::::*
cpe:2.3:a:apache:tomcat:4.1.16:::::::*
cpe:2.3:a:apache:tomcat:4.1.29:::::::*
cpe:2.3:a:apache:tomcat:4.1.22:::::::*
cpe:2.3:a:apache:tomcat:4.0.6:::::::*
cpe:2.3:a:apache:tomcat:4.1.5:::::::*
cpe:2.3:a:apache:tomcat:4.1.26:::::::*
cpe:2.3:a:apache:tomcat:4.1.13:::::::*
cpe:2.3:a:apache:tomcat:4.1.8:::::::*
cpe:2.3:a:apache:tomcat:4.0.3:::::::*
cpe:2.3:a:apache:tomcat:4.1.17:::::::*
cpe:2.3:a:apache:tomcat:4.0.1:::::::*
cpe:2.3:a:apache:tomcat:4.1.33:::::::*
cpe:2.3:a:apache:tomcat:4.1.1:::::::*
cpe:2.3:a:apache:tomcat:4.1.12:::::::*
cpe:2.3:a:apache:tomcat:4.1.28:::::::*
cpe:2.3:a:apache:tomcat:4.1.15:::::::*
cpe:2.3:a:apache:tomcat:4.1.10:::::::*
cpe:2.3:a:apache:tomcat:4.1.0:::::::*
cpe:2.3:a:apache:tomcat:4.1.20:::::::*
cpe:2.3:a:apache:tomcat:4.0.2:::::::*
cpe:2.3:a:apache:tomcat:4.1.3:::::::*
cpe:2.3:a:apache:tomcat:4.0.5:::::::*
cpe:2.3:a:apache:tomcat:4.1.23:::::::*
cpe:2.3:a:apache:tomcat:4.0.0:::::::*
cpe:2.3:a:apache:tomcat:4.1.34:::::::*
cpe:2.3:a:apache:tomcat:4.1.32:::::::*
cpe:2.3:a:apache:tomcat:4.1.6:::::::*
cpe:2.3:a:apache:tomcat:4.1.9:::::::*