Intrusion PreventionHTTP.Malformed.Request.Directory.Traversal
Description
This indicates an attack attempt against a directory-traversal vulnerability in multiple products.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP request. It allows a remote attacker to read arbitrary files on the target host.
Affected Products
Apache Software Foundation Tomcat 6.0.16 and previous versions
3Com Network Supervisor 5.1 and previous versions
3Com Network Director 2.0 and previous versions
Impact
Information Disclosure
Recommended Actions
Contact your vendor for upgrade or patch information.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2018-10-16 | 13.473 | Sig Added |
| ID | 24975 |
| Created | Nov 30, 2010 |
| Updated | Oct 15, 2018 |
| Risk |
|
| CVE ID | CVE-2008-2938 CVE-2005-2020 |
| Exploit Prediction Score | 97.09% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache, Other |