Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2003-0043
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2003-0043

Description:
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

CVE Status:
Entry

References:

XF
  http://xforce.iss.net/xforce/xfdb/11195

HP
  http://www.securityfocus.com/advisories/5111

DEBIAN
  http://www.debian.org/security/2003/dsa-246

CONFIRM
  http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
  http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

CIAC
  http://www.ciac.org/ciac/bulletins/n-060.shtml

BID
  6722


Return to the previous page.