PT-2003-1329 · Apache · Jakarta Tomcat+1

Publicado 2003-01-29 · Atualizado 2022-04-29 · CVE-2003-0044

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jakarta Tomcat versions 3.x through 3.3.1a

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities found in the examples and ROOT web applications. These vulnerabilities allow remote attackers to insert arbitrary web script or HTML. It is noted that the examples web application should not be installed on production servers due to these vulnerabilities.

Recommendations For Jakarta Tomcat versions 3.x through 3.3.1a, consider uninstalling the examples web application to minimize the risk of exploitation, especially on production servers. As a temporary workaround, restrict access to the ROOT web application and the examples web application until a fix is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2003-0044

DSA-246

GHSA-5HGM-QM5M-5VMW

Produtos afetados

Apache Tomcat

Jakarta Tomcat

Referências · 14

• http://ciac.org/ciac/bulletins/n-060.shtml · Nota
• https://tomcat.apache.org/security-3 · Nota
• http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt · Aviso do Fabricante
• http://debian.org/security/2003/dsa-246 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11196 · Nota
• http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0044 · Nota de Segurança
• http://osvdb.org/9204 · Nota
• http://securityfocus.com/advisories/5111 · Aviso do Fabricante
• http://securityfocus.com/bid/6720 · Nota
• https://osv.dev/vulnerability/GHSA-5hgm-qm5m-5vmw · Aviso do Fabricante
• http://osvdb.org/9203 · Nota
• http://secunia.com/advisories/7972 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044 · Nota