5

CVE-2002-2006

Exploit
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Tomcat Version3.0
Apache ≫ Tomcat Version3.1
Apache ≫ Tomcat Version3.1.1
Apache ≫ Tomcat Version3.2
Apache ≫ Tomcat Version3.2.1
Apache ≫ Tomcat Version3.2.3
Apache ≫ Tomcat Version3.2.4
Apache ≫ Tomcat Version3.3
Apache ≫ Tomcat Version3.3.1
Apache ≫ Tomcat Version4.0.0
Apache ≫ Tomcat Version4.0.1
Apache ≫ Tomcat Version4.0.2
Apache ≫ Tomcat Version4.0.3
Apache ≫ Tomcat Version4.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 30.67% 0.98
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
http://tomcat.apache.org/security-4.html
http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html
Exploit
http://secunia.com/advisories/30899
http://secunia.com/advisories/30908
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1
http://www.iss.net/security_center/static/8932.php
http://www.securityfocus.com/bid/4575
Exploit
http://www.vupen.com/english/advisories/2008/1979/references