Tomcat@4.0.1 Security Vulnerabilities and Issues — Tomcat@4.0.1 CVE List

Lucene search

ApacheTomcat4.0.1

2 matches found

CVE•added 2005/07/14 4:0 a.m.•55 views

CVE-2002-2006

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

5CVSS6.1AI score0.32359EPSS

CVE•added 2005/07/14 4:0 a.m.•37 views

CVE-2002-2009

Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3)

5CVSS6.7AI score0.0278EPSS