Description
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
Mitigation
We recommend upgrading to a version of this component that is not vulnerable to this specific issue. A workaround, as suggested in the security bulletin, is to "limit write access to trusted users."
Ref: http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%[email protected]%3E
