CVE-2003-0042

EPSS 55.83%
Veröffentlicht 07.02.2003 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Tomcat Version3.0

Apache ≫ Tomcat Version3.1

Apache ≫ Tomcat Version3.1.1

Apache ≫ Tomcat Version3.2

Apache ≫ Tomcat Version3.2.1

Apache ≫ Tomcat Version3.2.3

Apache ≫ Tomcat Version3.2.4

Apache ≫ Tomcat Version3.3

Apache ≫ Tomcat Version3.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	55.83%	0.978

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Vendor Advisory

http://marc.info/?l=bugtraq&m=104394568616290&w=2

http://secunia.com/advisories/7972

http://secunia.com/advisories/7977

http://www.ciac.org/ciac/bulletins/n-060.shtml

http://www.debian.org/security/2003/dsa-246

Patch

Vendor Advisory

http://www.securityfocus.com/advisories/5111

http://www.securityfocus.com/bid/6721

https://exchange.xforce.ibmcloud.com/vulnerabilities/11194

https://nvd.nist.gov/vuln/detail/CVE-2003-0042

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0042

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0042

EUVD