vulnwire
9.4crit

CVE-2008-5518in critical feed1 exploit

Apache Geronimo Application Server multiple directory traversal vulnerabilities

Also known as GHSA-xm92-rf24-h74w

Published 17 y ago · modified 4 mo ago · JSON

CVSS
9.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
35.9%
percentile 98%
Public exploits
1
Exploit-DB

Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.

Exploit prediction (EPSS)

35.93% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-8458 Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities · remote · 2009-04-16

CVSS scores

Assigned byVersionScoreVector
NVD2.09.4AV:N/AC:L/Au:N/C:C/I:C/A:N

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.geronimo.plugins:console
>=2.1.0, <2.1.4
2.1.4

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/49900 · vdb-entry, x_refsource_XF, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/49899 · vdb-entry, x_refsource_XF, x_transferred
  • geronimo.apache.org /21x-security-report.html#2.1.xSecurityReport-214 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2009/1089 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/34562 · vdb-entry, x_refsource_BID, x_transferred
  • issues.apache.org /jira/browse/GERONIMO-4597 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/34715 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/49898 · vdb-entry, x_refsource_XF, x_transferred
  • exploit-db.com /exploits/8458 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /archive/1/502733/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • dsecrg.com /pages/vul/show.php?id=118 · x_refsource_MISC, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2008-5518 · advisory
  • github.com /apache/geronimo/commit/aa0c2c26dde8930cad924796af7c17a13d236b16 · web
  • github.com /apache/geronimo · package
  • web.archive.org /web/20090419162753/http://secunia.com/advisories/34715 · web
  • web.archive.org /web/20090422192030/http://dsecrg.com/pages/vul/show.php?id=118 · web
  • web.archive.org /web/20200229223125/http://www.securityfocus.com/bid/34562 · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.