CVE-2006-3835

Description

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html
• http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
• http://secunia.com/advisories/25212
• http://secunia.com/advisories/30899
• http://secunia.com/advisories/30908