Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache tomcat 4.0.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2003-0866
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote malicious users to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
Apache Tomcat 4.0.4Apache Tomcat 4.0.6Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.0.2Apache Tomcat 4.0.5Apache Tomcat 4.0.0
NA
CVE-2007-1358
Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 up to and including 4.0.6 and 4.1.0 up to and including 4.1.34 allows remote malicious users to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not con...
Apache Tomcat 4.0.4Apache Tomcat 4.0.6Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.1.0Apache Tomcat 4.0.2Apache Tomcat 4.0.5Apache Tomcat 4.0.0Apache Tomcat
NA
CVE-2002-1394
Apache Tomcat 4.0.5 and previous versions, when using both the invoker servlet and the default servlet, allows remote malicious users to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
Apache Tomcat 4.0.4Apache Tomcat 4.1.9Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.1.3Apache Tomcat 4.1.10Apache Tomcat 4.1.0Apache Tomcat 4.0.2Apache Tomcat 4.0.5Apache Tomcat 4.0.0
NA
CVE-2002-2006
The default installation of Apache Tomcat 4.0 up to and including 4.1 and 3.0 up to and including 3.3.1 allows remote malicious users to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
Apache Tomcat 3.1Apache Tomcat 3.2.1Apache Tomcat 3.2.4Apache Tomcat 3.0Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.1.0Apache Tomcat 3.1.1Apache Tomcat 4.0.2Apache Tomcat 4.0.0Apache Tomcat 3.2.3Apache Tomcat 3.2Apache Tomcat 3.3.1Apache Tomcat 3.3
NA
CVE-2007-3383
Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 up to and including 4.0.6 and 4.1.0 up to and including 4.1.36 allows remote malicious users to inject arbitrary web script or HTML ...
Apache Tomcat 4.1.2Apache Tomcat 4.0.4Apache Tomcat 4.1.36Apache Tomcat 4.1.24Apache Tomcat 4.1.31Apache Tomcat 4.0.6Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.1.1Apache Tomcat 4.1.28Apache Tomcat 4.1.15Apache Tomcat 4.1.10Apache Tomcat 4.1.0Apache Tomcat 4.0.2Apache Tomcat 4.1.3Apache Tomcat 4.0.5Apache Tomcat 4.0.0
NA
CVE-2002-1148
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and previous versions allows remote malicious users to read source code for server files via a direct request to the servlet.
Apache Tomcat 3.1Apache Tomcat 4.0.4Apache Tomcat 3.2.1Apache Tomcat 4.1.9Apache Tomcat 3.2.2Apache Tomcat 3.2.4Apache Tomcat 3.0Apache Tomcat 4.0.3Apache Tomcat 4.0.1Apache Tomcat 4.1.3Apache Tomcat 4.1.10Apache Tomcat 4.1.0Apache Tomcat 3.1.1Apache Tomcat 4.0.2Apache Tomcat 4.0.0Apache Tomcat 3.2.3Apache Tomcat 3.2Apache Tomcat 3.3.1Apache Tomcat 3.3
NA
CVE-2005-4703
Apache Tomcat 4.0.3, when running on Windows, allows remote malicious users to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.
Apache Tomcat 4.0.3
NA
CVE-2002-0682
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote malicious users to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
Apache Tomcat 4.0.3
NA
CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions prior to 4.1.3 beta, allows remote malicious users to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.
Apache Tomcat 4.0.3
NA
CVE-2002-0936
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
Apache Tomcat 4.0.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook