Apache.Tomcat.UTF-8.Remote.Directory.Traversal

Description

This indicates a possible attack against a Directory Traversal vulnerability in Apache Tomcat.
This is caused by the vulnerable application's failure to sanitize user supplied input. A successful attack may allow a remote attacker to view arbitrary local files and directories within the context of the webserver.

Affected Products

Apache Software Foundation Tomcat 6.0 to 6.0.16
Apache Software Foundation Tomcat 5.5 to 5.5.26
Apache Software Foundation Tomcat 4.1 to 4.1.37

Impact

Information disclosure: Attackers may be able to bypass security restrictions and compromise vulnerable systems.

Recommended Actions

Upgrade to the latest version, available from the website:
http://tomcat.apache.org/

References