Description

Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.

Remediation

References

CVE-2006-3835

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238)

WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.9)

WordPress Plugin JetWidgets For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.0.8)

OpenVPN AS Other Vulnerability (CVE-2006-1629)

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17301)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-3835