vulnwire
5.0med

CVE-2002-20061 exploit

Apache Tomcat Default Installation Reveals Sensitive Information

Also known as GHSA-8g4f-fh7f-4fwh

Published 23 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
30.7%
percentile 98%
Public exploits
1
Exploit-DB

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

Exploit prediction (EPSS)

30.67% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-21412 Apache Tomcat 4.0/4.1 - Servlet Full Path Disclosure · remote · 2002-04-23

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.tomcat:tomcat
>=4.0.0, <4.1.0
>=3.0, <3.3a
4.1.0
3.3a

References

  • tomcat.apache.org /security-4.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/30908 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-239312-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/30899 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/1979/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-04/0311.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/4575 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/8932.php · vdb-entry, x_refsource_XF, x_transferred
  • lists.apache.org /thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apac · mailing-list, x_refsource_MLIST, x_transferred
  • lists.apache.org /thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apa · mailing-list, x_refsource_MLIST, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2002-2006 · advisory
  • lists.apache.org /thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.o · web
  • lists.apache.org /thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@<dev.tomcat.apache.o · web
  • lists.apache.org /thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache. · web
  • web.archive.org /web/20020602051837/http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html · web
  • web.archive.org /web/20021026082659/http://online.securityfocus.com/bid/4575 · web
  • web.archive.org /web/20030104173336/http://www.iss.net/security_center/static/8932.php · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.