Description

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.

Remediation

References

CVE-2002-1895

Related Vulnerabilities

WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Multiple Vulnerabilities (5.3.2)

WordPress Plugin Media Library Assistant Information Disclosure (3.00)

WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17308)

WebLogic CVE-2016-3505 Vulnerability (CVE-2016-3505)

Severity

Medium

Classification

CVE-2002-1895

Tags

Missing Update Known Vulnerabilities