CVE-2002-0936 - The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (en

CVE-2002-0936

Summary

The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).

References

Vulnerable Configurations

cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 25-03-2019 - 11:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	4995
confirm	http://tomcat.apache.org/security-4.html
mlist	[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ [tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ [tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/
vulnwatch	20020611 [VulnWatch] Generic Crash-JSP
xf	jsp-engine-wprinterjob-dos(9339)

Last major update

25-03-2019 - 11:29

Published

04-10-2002 - 04:00

Last modified

25-03-2019 - 11:29