7470 matches found
CVE-2002-0682
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet...
CVE-2002-1394
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148...
CVE-2002-0682
Apache Tomcat - CVE-2002-0682: a cross-site scripting (XSS) flaw in the /servlet/ mapping allows remote attackers to execute script as other users by injecting script into a URL, triggered when an exception is thrown by the servlet. Affected version in the public record is Tomcat 4.0.3; vulnerabi...
CVE-2002-1394
Apache Tomcat 4.x: vulnerability allows remote disclosure of server source code when using both the invoker servlet and the default servlet (Tomcat 4.0.5 and earlier). Root cause is exposure of server files through misconfigured/default servlet handling; impact is read access to source code and p...
Apache Tomcat 4.0.x < 4.0.5 / 4.1.x < 4.1.11 JSP Source Code Disclosure
Binary data 1463.pasl...
Apache Tomcat Snoop Servlet Remote Information Disclosure
Binary data 1464.prm...
Apache Tomcat < 3.3.1a Servlet Engine MS/DOS Device Name DoS
Binary data 1467.pasl...
Apache Tomcat /status Information Disclosure
Binary data 1462.prm...
Apache Tomcat < 3.3.1a Directory Listing and File Disclosure
Binary data 1466.pasl...
Apache Tomcat < 3.2.1 Nonexistent File Error Message Path Disclosure
Binary data 1465.pasl...
Apache Tomcat 4.1.x < 4.1.40 / 5.5.x < 5.5.28 / 6.0.x < 6.0.20 Multiple Vulnerabilities
Binary data 5044.pasl...
Apache Tomcat Sample App cal2.jsp time Parameter XSS (CVE-2009-0781)
Binary data 4501.prm...
Apache Tomcat source.jsp Arbitrary Directory Listing
The source.jsp page, distributed with Apache Tomcat, discloses information when given a specially crafted query string. This can reveal information such as the web root path and directory listings. A remote attacker exploit this information to mount further attacks. %NASLMINLEVEL 70300 This scrip...
Novell NetWare 6.0 Tomcat source.jsp Traversal Arbitrary File Access
The Apache Tomcat server distributed with NetWare 6.0 has a directory traversal vulnerability. As a result, sensitive information could be obtained from the NetWare server, such as the RCONSOLE password located in AUTOEXEC.NCF. Example :...
Apache Tomcat Default Files
The default error page, default index page, example JSPs and/or example servlets are installed on the remote Apache Tomcat server. These files should be removed as they may help an attacker uncover information about the remote Tomcat install or host itself. C Tenable Network Security, Inc. Based ...
Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service
Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service source: https://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are...
Apache Tomcat 4.0.x - Non-HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/8824/info Apache Tomcat 4 has been reported prone to a remotely triggered denial-of-service vulnerability when handling undisclosed non-HTTP request types. When certain non-HTTP request types are handled by the Tomcat HTTP connector, the Tomcat server wil...
[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...
DSA-395 tomcat4 - incorrect input handling
Bulletin has no description...
CVE-2002-1567
Cross-site scripting XSS vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script...