CVE

Id
6873  
CVE No.
CVE-2003-0044  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.  
Phase
Modified (20071121)  
Votes
ACCEPT(3) Armstrong, Cole, Green | MODIFY(1) Cox | NOOP(1) Christey | REVIEWING(1) Jones  
Comments
Jones> [JHJ] XSS really "execute arbitrary web script"? | CHANGE> [Cox changed vote from NOOP to MODIFY] | Cox> "Agree with Jones, wording on effect of a XSS could be better" | Christey> I"ve been trying to devise reasonable-but-short wordings for | XSS issues and the terminology just isn"t quite there yet. This | description is clearly a failed wording, however :-)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39193 6873 CVE-2003-0044 CONFIRM:http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/  View
39194 6873 CVE-2003-0044 CONFIRM:http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt  View
39195 6873 CVE-2003-0044 DEBIAN:DSA-246  View
39196 6873 CVE-2003-0044 URL:http://www.debian.org/security/2003/dsa-246  View
39197 6873 CVE-2003-0044 HP:HPSBUX0303-249  View
39198 6873 CVE-2003-0044 URL:http://www.securityfocus.com/advisories/5111  View
39199 6873 CVE-2003-0044 CIAC:N-060  View
39200 6873 CVE-2003-0044 URL:http://www.ciac.org/ciac/bulletins/n-060.shtml  View
39201 6873 CVE-2003-0044 BID:6720  View
39202 6873 CVE-2003-0044 URL:http://www.securityfocus.com/bid/6720  View
39203 6873 CVE-2003-0044 OSVDB:9203  View
39204 6873 CVE-2003-0044 URL:http://www.osvdb.org/9203  View
39205 6873 CVE-2003-0044 OSVDB:9204  View
39206 6873 CVE-2003-0044 URL:http://www.osvdb.org/9204  View
39207 6873 CVE-2003-0044 SECUNIA:7972  View
39208 6873 CVE-2003-0044 URL:http://secunia.com/advisories/7972  View
39209 6873 CVE-2003-0044 XF:tomcat-web-app-xss(11196)  View

Related JVN