Summary
Apache Tomcat (prior to 3.3.1a) is prone to a directory listing and file disclosure vulnerability, it allows remote attackers to potentially list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file.
Solution
Upgrade to Tomcat 4.1.18 or newer version.
Severity
Classification
-
CVE CVE-2003-0042 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apache Solr XML External Entity(XXE) Vulnerability-01 Jan-14
- Apache Web Server Configuration File Environment Variable Local Buffer Overflow Vulnerability
- Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities
- Apache ActiveMQ Multiple Vulnerabilities
- Apache Struts Showcase Multiple Persistence Cross-Site Scripting Vulnerabilities