Tomcat@3.3 Security Vulnerabilities and Issues — Tomcat@3.3 CVE List

Lucene search

ApacheTomcat3.3

3 matches found

CVE•added 2005/07/14 4:0 a.m.•55 views

CVE-2002-2006

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

5CVSS6.1AI score0.32359EPSS

CVE•added 2005/05/02 4:0 a.m.•54 views

CVE-2005-0808

Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.

5CVSS6.6AI score0.17541EPSS

CVE•added 2005/06/28 4:0 a.m.•42 views

CVE-2002-1895

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.

5CVSS7.1AI score0.02785EPSS