Description

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.

Remediation

References

CVE-2002-1895

Related Vulnerabilities

Ruby on Rails Resource Management Errors Vulnerability (CVE-2015-7581)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1952)

WordPress Plugin Pricing Table by Supsystic Multiple Vulnerabilities (1.8.1)

Moodle Improper Authentication Vulnerability (CVE-2021-40693)

Joomla CVE-2019-12764 Vulnerability (CVE-2019-12764)

Severity

Medium

Classification

CVE-2002-1895

Tags

Missing Update Known Vulnerabilities