PT-2003-1299 · Apache · Apache Tomcat
Publicado
2003-09-19
·
Atualizado
2022-04-30
·
CVE-2002-1567
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Apache Tomcat version 4.1
Description
The issue allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script. This occurs because the unmodified requested URL is included in the 404 response header, and new lines in this URL appear to the client as the end of the header section. As a result, the remaining part of the URL, including the script elements, is treated as part of the response body, and the client executes the script.
Recommendations
For Apache Tomcat version 4.1, consider updating to a version where Tomcat replaces potentially unsafe characters in the response headers with spaces to prevent the execution of arbitrary scripts.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Tomcat