CVE ID:	CVE-2003-0043
Description:	Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0043 BugTraq ID: 6722 http://www.securityfocus.com/bid/6722 Computer Incident Advisory Center Bulletin: N-060 http://www.ciac.org/ciac/bulletins/n-060.shtml Debian Security Information: DSA-246 (Google Search) http://www.debian.org/security/2003/dsa-246 HPdes Security Advisory: HPSBUX0303-249 http://www.securityfocus.com/advisories/5111 XForce ISS Database: tomcat-webxml-read-files(11195) https://exchange.xforce.ibmcloud.com/vulnerabilities/11195