CVE-2002-2007
N/A
N/A
Summary
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.kb.cert.org/vuls/id/116963
- http://www.securityfocus.com/bid/4876
- http://www.procheckup.com/security_info/vuln_pr0206.html
- http://www.procheckup.com/security_info/vuln_pr0205.html
- http://www.iss.net/security_center/static/9208.php
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html
- http://www.procheckup.com/security_info/vuln_pr0207.html
- http://www.securityfocus.com/bid/4877
- http://www.securityfocus.com/bid/4878
References
- http://www.kb.cert.org/vuls/id/116963
- http://www.securityfocus.com/bid/4876
- http://www.procheckup.com/security_info/vuln_pr0206.html
- http://www.procheckup.com/security_info/vuln_pr0205.html
- http://www.iss.net/security_center/static/9208.php
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html
- http://www.procheckup.com/security_info/vuln_pr0207.html
- http://www.securityfocus.com/bid/4877
- http://www.securityfocus.com/bid/4878
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.