CVEs-PoC/2009/CVE-2009-3548.md

CVE-2009-3548

Description

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.

POC

Reference

• http://www.vmware.com/security/advisories/VMSA-2011-0003.html
• http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Github

• https://github.com/Joshua-Security-Project/Cybersecurity-practice-projects
• https://github.com/MohamedSayed47/DEPI_Final_project
• https://github.com/Montimage/OT-ICS-attacks
• https://github.com/cocomelonc/vulnexipy
• https://github.com/danyk20/pentest
• https://github.com/delsawright/System-Scan-Report_PenTesting_RedTeaming
• https://github.com/forget-eve/Software-Security-and-Testing
• https://github.com/m3n0sd0n4ld/uCVE
• https://github.com/montimage-projects/OT-ICS-attacks
• https://github.com/resilmesh2/MONT-Dataset-OT-ICS-attacks
• https://github.com/resilmesh2/OT-ICS-attacks