PT-2000-1605 · Apache · Jakarta Tomcat+1

Published 2000-07-20 · Updated 2022-02-22 · CVE-2000-0672

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jakarta Tomcat (affected versions not specified)

Description The issue concerns the default configuration of Jakarta Tomcat, where access to the /admin context is not restricted. This allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. Specifically, the admin context is not protected, enabling an attacker to mount an arbitrary file system path as a context. As a result, any files accessible from this file system path to the account under which Tomcat is running are then visible to the attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0672

Affected Products

Apache Tomcat

Jakarta Tomcat

References · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0672 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0672 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5160 · Note
• http://securityfocus.com/bid/1548 · Note
• https://tomcat.apache.org/security-3 · Note