PT-2002-2729 · Microsoft+1 · Windows+1

Published 2002-12-31 · Updated 2022-04-30 · CVE-2002-2008

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat version 4.0.3

Description The issue allows remote attackers to obtain the web root path via an HTTP request for a non-existent resource, which leaks the information in an error message. This issue only affects Windows operating systems.

Recommendations For Apache Tomcat version 4.0.3, update to version 4.1.3 or later to resolve the issue.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2002-2008

GHSA-M8W6-7RH6-4XJ6

Affected Products

Apache Tomcat

Windows

References · 16

• http://iss.net/security_center/static/9394.php · Patch
• https://osv.dev/vulnerability/GHSA-m8w6-7rh6-4xj6 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2008 · Security Note
• http://securityfocus.com/bid/5054 · Patch
• https://github.com/apache/tomcat · Note
• https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E · Note
• http://tomcat.apache.org/security-4.html · Note
• https://tomcat.apache.org/security-4 · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2008 · Note
• https://web.archive.org/web/20200815000000*/http://securityfocus.com/bid/5054 · Note
• https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E · Note
• https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E · Note