| Vulnerability Name: | CVE-2002-2008 (CCN-9394) | ||||||||
| Assigned: | 2002-06-19 | ||||||||
| Published: | 2002-06-19 | ||||||||
| Updated: | 2019-03-25 | ||||||||
| Summary: | Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||
| References: | Source: BUGTRAQ Type: Patch 20020619 KPMG-2002024: Apache Tomcat Path Disclosure Source: CCN Type: BugTraq Mailing List, Wed Jun 19 2002 - 04:38:38 CDT KPMG-2002024: Apache Tomcat Path Disclosure Source: MITRE Type: CNA CVE-2002-2008 Source: CCN Type: The Jakarta Project Web site Binary Downloads Source: CONFIRM Type: UNKNOWN http://tomcat.apache.org/security-4.html Source: XF Type: Patch tomcat-lpt9-path-disclosure(9394) Source: CCN Type: OSVDB ID: 34884 Apache Tomcat on Windows Nonexistent Resource Request Path Disclosure Source: BID Type: Patch 5054 Source: CCN Type: BID-5054 Apache Tomcat Web Root Path Disclosure Vulnerability Source: XF Type: UNKNOWN tomcat-lpt9-path-disclosure(9394) Source: MLIST Type: UNKNOWN [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ Source: MLIST Type: UNKNOWN [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ Source: MLIST Type: UNKNOWN [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/ | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||