Summary
Tomcat 4.0.4 and 4.1.10 (probably all other
earlier versions also) are vulnerable to source
code exposure by using the default servlet
org.apache.catalina.servlets.DefaultServlet.
Solution
Upgrade to the last releases 4.0.5 and 4.1.12.
See http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/ for the last releases.
Severity
Classification
-
CVE CVE-2002-1148 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apache Tomcat NIO Connector Denial of Service Vulnerability
- Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability
- Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities
- 2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities
- @Mail 'MailType' Parameter Cross Site Scripting Vulnerability