Description

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

Remediation

References

CVE-2002-2006

Related Vulnerabilities

Ruby on Rails CVE-2013-0277 Vulnerability (CVE-2013-0277)

WordPress Plugin Yet Another Photoblog Unspecified Vulnerability (1.10.6)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2107)

WordPress Plugin Analytics Remote Code Execution (1.7)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13449)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-2006