CVEvulnerability
CVE-2003-0045
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-02-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
Affected configurations
• apache tomcat 3.0
• apache tomcat 3.1
• apache tomcat 3.1.1
• apache tomcat 3.2
• apache tomcat 3.2.1
• apache tomcat 3.2.3
• apache tomcat 3.2.4
• apache tomcat 3.3
• apache tomcat 3.3.1
References
- http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12102 exchange.xforce.ibmcloud.com
- http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12102 exchange.xforce.ibmcloud.com