NVD

Id
80958  
Name
CVE-2002-2007  
Description
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-05  
Published
2002-12-31  
Modified Date
2008-09-05  
Seq
2002-2007  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
402791 80958 CVE-2002-2007 20020529 Vulnerability in Apache Tomcat v3.23 & v3.24  View
402792 80958 CVE-2002-2007 20020529 Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2)  View
402793 80958 CVE-2002-2007 tomcat-sample-reveal-path(9208)  View
402794 80958 CVE-2002-2007 VU#116963  View
402795 80958 CVE-2002-2007 http://www.procheckup.com/security_info/vuln_pr0205.html  View
402796 80958 CVE-2002-2007 http://www.procheckup.com/security_info/vuln_pr0206.html  View
402797 80958 CVE-2002-2007 http://www.procheckup.com/security_info/vuln_pr0207.html  View
402798 80958 CVE-2002-2007 4876  View
402799 80958 CVE-2002-2007 4877  View
402800 80958 CVE-2002-2007 4878  View

Related JVN