CVE-2006-3835 in Nokia Intellisync Mobile Suite
Summary
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
07/24/2006
Disclosure
07/25/2006
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3071 | Nokia Intellisync Mobile Suite denial of service | 404 | Proof-of-Concept | Official fix | CVE-2006-3835 |