PT-2002-1945 · Apache · Apache Tomcat

Published 2002-08-31 · Updated 2019-03-25 · CVE-2002-0936

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Apache Tomcat (affected versions not specified)

Description: The issue allows web page owners to cause a denial of service, resulting in the engine crashing on the web server. This can be achieved through a JSP page that calls the WPrinterJob().pageSetup(null,null) function.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0936

Affected Products

Apache Tomcat

References · 10

• 🔥 https://exploit-db.com/exploits/21534 · Exploit
• 🔥 http://securityfocus.com/bid/4995 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0936 · Security Note
• http://iss.net/security_center/static/9339.php · Vendor Advisory
• https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E · Note
• http://tomcat.apache.org/security-4.html · Note
• https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0936 · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html · Note