PT-2002-2730 · Apache · Apache Tomcat

Published 2002-12-31 · Updated 2022-04-30 · CVE-2002-2009

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat version 4.0.1

Description The issue allows remote attackers to obtain the web root path via specific HTTP requests for JSP files. This can be achieved by preceding the JSP file name with certain characters, such as +/, >/, </, or %20/, which results in an error message that leaks the pathname. Additionally, requests for JSP files with long file names can also lead to the disclosure of the full file system path to the JSP file.

Recommendations For Apache Tomcat version 4.0.1, consider restricting access to JSP files to minimize the risk of path disclosure until a patch is available. As a temporary workaround, avoid using JSP file names that are preceded by vulnerable characters or are excessively long.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2002-2009

GHSA-R6CF-CR44-M8RR

Affected Products

Apache Tomcat

References · 17

• 🔥 http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html · Exploit
• https://osv.dev/vulnerability/GHSA-r6cf-cr44-m8rr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2009 · Security Note
• https://github.com/apache/tomcat · Note
• https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E · Note
• http://tomcat.apache.org/security-4.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2009 · Note
• https://tomcat.apache.org/security-4 · Note
• https://web.archive.org/web/20200302170930/https://securityfocus.com/bid/4557 · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42915 · Note
• https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E · Note
• http://securityfocus.com/bid/4557 · Note
• https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E · Note
• http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html · Note