Description

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

Remediation

References

CVE-2002-2006

Related Vulnerabilities

WordPress Plugin Search & Replace PHP Object Injection (3.2.2)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1762)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.33)

WordPress Plugin WP DS FAQ Plus Cross-Site Scripting (1.4.1)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21603)

Severity

Medium

Classification

CVE-2002-2006

Tags

Missing Update Known Vulnerabilities