CVE-2003-0043 | BDVDB-2026-7073 Detail
Description#
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.debian.org/security/2003/dsa-246
- http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/
- http://www.securityfocus.com/advisories/5111
- http://www.ciac.org/ciac/bulletins/n-060.shtml
- http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
- http://www.securityfocus.com/bid/6722
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11195
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.