Description

Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.

Remediation

References

CVE-2002-2008

Related Vulnerabilities

WordPress Plugin classyfrieds Arbitrary File Upload (3.8)

WordPress Plugin GEO Redirector Cross-Site Scripting (1.0.1)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-32621)

WordPress Plugin Cart All In One For WooCommerce Cross-Site Request Forgery (1.1.10)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14945)

Severity

Medium

Classification

CVE-2002-2008

Tags

Missing Update Known Vulnerabilities