PT-2002-1708 · Apache · Apache Tomcat

Published 2002-07-23 · Updated 2019-03-25 · CVE-2002-0682

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Tomcat version 4.0.3

Description The issue allows remote attackers to execute scripts as other web users via a script in a URL with the /servlet/ mapping. This occurs because the script is not filtered when an exception is thrown by the servlet. A specially crafted URL using the invoker servlet and various internal classes can cause Tomcat to throw an exception that includes unescaped information from the malformed request, enabling a cross-site scripting attack.

Recommendations For Apache Tomcat version 4.0.3, consider disabling the invoker servlet as a temporary workaround until a patch is available. Restrict access to internal classes to minimize the risk of exploitation. Avoid using the /servlet/ mapping in URLs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0682

Affected Products

Apache Tomcat

References · 12

• 🔥 https://exploit-db.com/exploits/21604 · Exploit
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0682 · Security Note
• http://osvdb.org/4973 · Note
• https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E · Note
• http://securityfocus.com/bid/5193 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0682 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9520 · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E · Note
• http://marc.info/?l=bugtraq&m=102631703811297&w=2 · Note
• https://tomcat.apache.org/security-4 · Note
• https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E · Note