Description

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.

Remediation

References

CVE-2003-0866

Related Vulnerabilities

WordPress Plugin Gutenberg Blocks by WordPress Download Manager Cross-Site Scripting (2.1.8)

IBM RTC Files or Directories Accessible to External Parties Vulnerability (CVE-2017-1602)

WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0310)

Apache Tomcat Improper Authentication Vulnerability (CVE-2013-2067)

Severity

Medium

Classification

CVE-2003-0866

Tags

Missing Update Known Vulnerabilities