GHSA-8v5p-2cpv-c2x6
Apache Tomcat Source Code Disclosure
At a glance
- Published
- Updated
- CVE
- CVE-2002-1394
Description
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat | introduced 0, fixed 4.0.6 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2002-1394 ADVISORY
- https://archive.apache.org/dist/tomcat/tomcat-4/archive/v4.0.6/README.html WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10376 WEB
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org> WEB
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org> WEB
- https://web.archive.org/web/20030412075128/http://rhn.redhat.com/errata/RHSA-2003-075.html WEB
- https://web.archive.org/web/20030705143220/http://www.securityfocus.com/bid/6562 WEB
- https://web.archive.org/web/20041024213235/http://rhn.redhat.com/errata/RHSA-2003-082.html WEB
- https://web.archive.org/web/20070430073829/http://www.debian.org/security/2003/dsa-225 WEB
- http://issues.apache.org/bugzilla/show_bug.cgi?id=13365 WEB
- http://marc.info/?l=bugtraq&m=103470282514938&w=2 WEB
- http://marc.info/?l=tomcat-dev&m=103417249325526&w=2 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |