Description

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

Remediation

References

CVE-2002-0493

Related Vulnerabilities

OpenSSL Numeric Errors Vulnerability (CVE-2012-2131)

WordPress Multiple Vulnerabilities (0.70 - 3.6.1)

WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993)

PHP Other Vulnerability (CVE-2005-1042)

Restlet Framework Deserialization of Untrusted Data Vulnerability (CVE-2013-4271)

Severity

High

Classification

CVE-2002-0493

Tags

Missing Update Known Vulnerabilities