GitHub Advisoryadvisory · Maven

GHSA-w97x-xfxf-f9xj Jakarta Tomcat Denial of Service vulnerability

MEDIUM Published 2022-04-29 Modified 2023-09-18 Official page ↗
Aliases
CVE-2003-0045
Ecosystem
Maven
Packages
org.apache.tomcat:tomcat
Severity
Moderate
Weaknesses
CWE-400
Reviewed
2023-09-18

Affected packages

• Maven org.apache.tomcat:tomcat: < 3.3.1a → fixed in 3.3.1a

Description

Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.

Related

Alias · CVE (1)

  • CVE-2003-0045 Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References