Apache Tomcat Source Code Disclosure
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-1394US | high7.5 | — | ||
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protect… | ||||
02
references
External citations — patches, advisories, analysis.
- http://issues.apache.org/bugzilla/show_bug.cgi?id=13365WEB
- http://marc.info/?l=bugtraq&m=103470282514938&w=2WEB
- http://marc.info/?l=tomcat-dev&m=103417249325526&w=2WEB
- https://archive.apache.org/dist/tomcat/tomcat-4/archive/v4.0.6/README.htmlWEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10376WEB
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org>WEB
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org>WEB
- https://nvd.nist.gov/vuln/detail/CVE-2002-1394ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan