CVE-2008-2938
Apache Tomcat 4.1.0-4.1.37, 5.5.0-5.5.26, 6.0.0-6.0.16 - Directory Traversal via Encoded URI Sequences
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2008-2938.
PoCs published by mywisdom, Simon Ryeo, Naramsim, including Metasploit module auxiliary/admin/http/tomcat_utf8_traversal.
AI-analyzed exploit summary This exploit targets a directory traversal vulnerability in Apache Tomcat versions prior to 6.0.18 by sending a malformed UTF-8 encoded HTTP GET request to retrieve the contents of /etc/passwd. The code checks for the presence of 'root:x' to confirm successful exploitation.
Description
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
Exploits (5)
This exploit targets a directory traversal vulnerability in Apache Tomcat versions prior to 6.0.18 by sending a malformed UTF-8 encoded HTTP GET request to retrieve the contents of /etc/passwd. The code checks for the presence of 'root:x' to confirm successful exploitation.
This exploit demonstrates a directory traversal vulnerability in Apache Tomcat prior to 6.0.18. By crafting a specific URL with UTF-8 encoded sequences, an attacker can access arbitrary files on the system.
The repository contains descriptions and references for multiple CVEs, including CVE-2014-2064, but lacks executable exploit code for the specified CVE. It includes detailed explanations and references for vulnerabilities in Tomcat, Spring, and Jenkins.
This Metasploit module exploits a directory traversal vulnerability in Apache Tomcat (CVE-2008-2938) by sending UTF-8 encoded traversal sequences to access sensitive files. It tests for the vulnerability under specific configurations where allowLinking and URIEncoding are set in a non-default manner.
This Metasploit module exploits a directory traversal vulnerability in Trend Micro DLP Appliance v5.5 build <= 1294, leveraging the Tomcat UTF-8 bug (CVE-2008-2938) to access sensitive files. It tests for the vulnerability by attempting to traverse directories and read files listed in a wordlist.