ID CVE-2005-4703
Summary Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.
References
Vulnerable Configurations
  • Apache Software Foundation Tomcat 4.0.3
    cpe:2.3:a:apache:tomcat:4.0.3
CVSS
Base: 5.0 (as of 03-02-2006 - 10:33)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
exploit-db via4
description Apache Tomcat 4.0.3 Requests Containing MS-DOS Device Names Information Disclosure Vulnerability. CVE-2005-4703. Remote exploits for multiple platform
id EDB-ID:31551
last seen 2016-02-03
modified 2005-10-14
published 2005-10-14
reporter security curmudgeon
source https://www.exploit-db.com/download/31551/
title Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure Vulnerability
refmap via4
bid 28484
confirm http://tomcat.apache.org/security-4.html
misc http://osvdb.org/ref/20/20033-tomcat-dos-path_disclosure.txt
mlist [tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/
osvdb 20033
xf tomcat-msdos-path-disclosure(42914)
Last major update 05-09-2008 - 16:57
Published 31-12-2005 - 00:00
Last modified 21-03-2019 - 11:33
Back to Top