Lucene search
MitreCVELIST:CVE-2003-0043HistorySep 01, 2004 - 4:00 a.m.
CVE-2003-0043
2004-09-0104:00:00
mitre
www.cve.org
7
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
References
jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/
jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
www.ciac.org/ciac/bulletins/n-060.shtml
www.debian.org/security/2003/dsa-246
www.securityfocus.com/advisories/5111
www.securityfocus.com/bid/6722
exchange.xforce.ibmcloud.com/vulnerabilities/11195
Related
cve
cve
CVE-2003-0043
2004-09-01 04:00:00
nvd
nvd
CVE-2003-0043
2003-02-07 05:00:00
nessus
nessus
Apache Tomcat Directory Listing and File Disclosure
2003-03-22 00:00:00
Debian DSA-246-1 : tomcat - information exposure, XSS
2004-09-29 00:00:00
openvas
openvas
Apache Tomcat < 3.3.1a Directory Listing and File Disclosure Vulnerability - Active Check
2005-11-03 00:00:00
Debian Security Advisory DSA 246-1 (tomcat)
2008-01-17 00:00:00
HP-UX Update for Tomcat HPSBUX00249
2009-05-05 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 3.3.1a
2003-01-27 00:00:00
osv
osv
tomcat - information exposure, cross site scripting
2003-01-29 00:00:00
debian
debian