CVE-2003-0042

EPSS 55.83%
Published 07.02.2003 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Tomcat Version3.0

Apache ≫ Tomcat Version3.1

Apache ≫ Tomcat Version3.1.1

Apache ≫ Tomcat Version3.2

Apache ≫ Tomcat Version3.2.1

Apache ≫ Tomcat Version3.2.3

Apache ≫ Tomcat Version3.2.4

Apache ≫ Tomcat Version3.3

Apache ≫ Tomcat Version3.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	55.83%	0.978

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Vendor Advisory

http://marc.info/?l=bugtraq&m=104394568616290&w=2

http://secunia.com/advisories/7972

http://secunia.com/advisories/7977

http://www.ciac.org/ciac/bulletins/n-060.shtml

http://www.debian.org/security/2003/dsa-246

Patch

Vendor Advisory

http://www.securityfocus.com/advisories/5111

http://www.securityfocus.com/bid/6721

https://exchange.xforce.ibmcloud.com/vulnerabilities/11194

https://nvd.nist.gov/vuln/detail/CVE-2003-0042

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0042

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0042

EUVD