CVE

Id
6871  
CVE No.
CVE-2003-0042  
Status
Candidate  
Description
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.  
Phase
Modified (20071113)  
Votes
ACCEPT(3) Armstrong, Cole, Green | NOOP(1) Cox | REVIEWING(1) Jones  
Comments
Jones> [JHJ] RECAST (split?) Only if vulnerability is not null character for both  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39164 6871 CVE-2003-0042 BUGTRAQ:20030130 Apache Jakarta Tomcat 3 URL parsing vulnerability  View
39165 6871 CVE-2003-0042 URL:http://marc.info/?l=bugtraq&m=104394568616290&w=2  View
39166 6871 CVE-2003-0042 VULNWATCH:20030130 Apache Jakarta Tomcat 3 URL parsing vulnerability  View
39167 6871 CVE-2003-0042 CONFIRM:http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/  View
39168 6871 CVE-2003-0042 CONFIRM:http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt  View
39169 6871 CVE-2003-0042 DEBIAN:DSA-246  View
39170 6871 CVE-2003-0042 URL:http://www.debian.org/security/2003/dsa-246  View
39171 6871 CVE-2003-0042 HP:HPSBUX0303-249  View
39172 6871 CVE-2003-0042 URL:http://www.securityfocus.com/advisories/5111  View
39173 6871 CVE-2003-0042 CIAC:N-060  View
39174 6871 CVE-2003-0042 URL:http://www.ciac.org/ciac/bulletins/n-060.shtml  View
39175 6871 CVE-2003-0042 BID:6721  View
39176 6871 CVE-2003-0042 URL:http://www.securityfocus.com/bid/6721  View
39177 6871 CVE-2003-0042 SECUNIA:7972  View
39178 6871 CVE-2003-0042 URL:http://secunia.com/advisories/7972  View
39179 6871 CVE-2003-0042 SECUNIA:7977  View
39180 6871 CVE-2003-0042 URL:http://secunia.com/advisories/7977  View
39181 6871 CVE-2003-0042 XF:tomcat-null-directory-listing(11194)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63360 JVNDB-2003-000086 Apache Tomcat の .xml ファイルの処理における情報漏洩の脆弱性 ------------ CVE-2003-0043 6871 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000086.html  View