PT-2003-1329 · Apache · Jakarta Tomcat+1

Published 2003-01-29 · Updated 2022-04-29 · CVE-2003-0044

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jakarta Tomcat versions 3.x through 3.3.1a

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities found in the examples and ROOT web applications. These vulnerabilities allow remote attackers to insert arbitrary web script or HTML. It is noted that the examples web application should not be installed on production servers due to these vulnerabilities.

Recommendations For Jakarta Tomcat versions 3.x through 3.3.1a, consider uninstalling the examples web application to minimize the risk of exploitation, especially on production servers. As a temporary workaround, restrict access to the ROOT web application and the examples web application until a fix is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2003-0044

DSA-246

GHSA-5HGM-QM5M-5VMW

Affected Products

Apache Tomcat

Jakarta Tomcat

References · 14

• http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt · Vendor Advisory
• http://debian.org/security/2003/dsa-246 · Vendor Advisory
• http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0044 · Security Note
• http://securityfocus.com/advisories/5111 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5hgm-qm5m-5vmw · Vendor Advisory
• http://ciac.org/ciac/bulletins/n-060.shtml · Note
• https://tomcat.apache.org/security-3 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11196 · Note
• http://osvdb.org/9204 · Note
• http://securityfocus.com/bid/6720 · Note
• http://osvdb.org/9203 · Note
• http://secunia.com/advisories/7972 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044 · Note