Test Kennung:	1.3.6.1.4.1.25623.1.0.11176
Kategorie:	Web Servers
Titel:	Tomcat 4.x JSP Source Exposure - Active Check
Zusammenfassung:	Tomcat 4.0.4 and 4.1.10 (probably all other earlier versions; also) are vulnerable to source code exposure by using the default servlet; org.apache.catalina.servlets.DefaultServlet.
Beschreibung:	Summary: Tomcat 4.0.4 and 4.1.10 (probably all other earlier versions also) are vulnerable to source code exposure by using the default servlet org.apache.catalina.servlets.DefaultServlet. Solution: Update to version 4.0.5, 4.1.12 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1148 BugTraq ID: 5786 http://www.securityfocus.com/bid/5786 Bugtraq: 20020924 JSP source code exposure in Tomcat 4.x (Google Search) http://marc.info/?l=bugtraq&m=103288242014253&w=2 Debian Security Information: DSA-170 (Google Search) http://www.debian.org/security/2002/dsa-170 HPdes Security Advisory: HPSBUX0212-229 http://online.securityfocus.com/advisories/4758 https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E http://www.redhat.com/support/errata/RHSA-2002-217.html http://www.redhat.com/support/errata/RHSA-2002-218.html http://www.iss.net/security_center/static/10175.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1394 BugTraq ID: 6562 http://www.securityfocus.com/bid/6562 Debian Security Information: DSA-225 (Google Search) http://www.debian.org/security/2003/dsa-225 http://marc.info/?l=bugtraq&m=103470282514938&w=2 http://www.redhat.com/support/errata/RHSA-2003-075.html http://www.redhat.com/support/errata/RHSA-2003-082.html XForce ISS Database: tomcat-invoker-source-code(10376) https://exchange.xforce.ibmcloud.com/vulnerabilities/10376
Copyright	Copyright (C) 2002 Felix Huber

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.