File tree Expand file tree Collapse file tree 2 files changed +12
-10
lines changed
modules/auxiliary/admin/http Expand file tree Collapse file tree 2 files changed +12
-10
lines changed Original file line number Diff line number Diff line change @@ -13,8 +13,8 @@ class MetasploitModule < Msf::Auxiliary
13
13
14
14
def initialize
15
15
super (
16
- 'Name' => 'Tomcat UTF-8 Directory Traversal Vulnerability' ,
17
- 'Description' => %q{
16
+ 'Name' => 'Tomcat UTF-8 Directory Traversal Vulnerability' ,
17
+ 'Description' => %q{
18
18
This module tests whether a directory traversal vulnerablity is present
19
19
in versions of Apache Tomcat 4.1.0 - 4.1.37, 5.5.0 - 5.5.26 and 6.0.0
20
20
- 6.0.16 under specific and non-default installations. The connector must have
@@ -25,15 +25,16 @@ def initialize
25
25
RedHat 9 running Tomcat 6.0.16 and Sun JRE 1.5.0-05. You may wish to change
26
26
FILE (hosts,sensitive files), MAXDIRS and RPORT depending on your environment.
27
27
} ,
28
- 'References' =>
28
+ 'References' =>
29
29
[
30
30
[ 'URL' , 'http://tomcat.apache.org/' ] ,
31
31
[ 'OSVDB' , '47464' ] ,
32
32
[ 'CVE' , '2008-2938' ] ,
33
33
[ 'URL' , 'http://www.securityfocus.com/archive/1/499926' ] ,
34
34
] ,
35
- 'Author' => [ 'patrick' , 'guerrino <ruggine> di massa' ] ,
36
- 'License' => MSF_LICENSE
35
+ 'Author' => [ 'patrick' , 'guerrino <ruggine> di massa' ] ,
36
+ 'License' => MSF_LICENSE ,
37
+ 'DisclosureDate' => 'Jan 9 2009'
37
38
)
38
39
39
40
register_options (
Original file line number Diff line number Diff line change @@ -12,8 +12,8 @@ class MetasploitModule < Msf::Auxiliary
12
12
13
13
def initialize
14
14
super (
15
- 'Name' => 'TrendMicro Data Loss Prevention 5.5 Directory Traversal' ,
16
- 'Description' => %q{
15
+ 'Name' => 'TrendMicro Data Loss Prevention 5.5 Directory Traversal' ,
16
+ 'Description' => %q{
17
17
This module tests whether a directory traversal vulnerablity is present
18
18
in Trend Micro DLP (Data Loss Prevention) Appliance v5.5 build <= 1294.
19
19
The vulnerability appears to be actually caused by the Tomcat UTF-8
@@ -22,7 +22,7 @@ def initialize
22
22
Note that in the Trend Micro appliance, /etc/shadow is not used and therefore
23
23
password hashes are stored and anonymously accessible in the passwd file.
24
24
} ,
25
- 'References' =>
25
+ 'References' =>
26
26
[
27
27
[ 'URL' , 'http://tomcat.apache.org/' ] ,
28
28
[ 'OSVDB' , '47464' ] ,
@@ -32,8 +32,9 @@ def initialize
32
32
[ 'EDB' , '17388' ] ,
33
33
[ 'BID' , '48225' ] ,
34
34
] ,
35
- 'Author' => [ 'patrick' ] ,
36
- 'License' => MSF_LICENSE
35
+ 'Author' => [ 'patrick' ] ,
36
+ 'License' => MSF_LICENSE ,
37
+ 'DisclosureDate' => 'Jan 9 2009'
37
38
)
38
39
39
40
register_options (
You can’t perform that action at this time.
0 commit comments