medium5.0
CVE-2003-0045
Jakarta Tomcat Denial of Service vulnerability
Impact
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.tomcat:tomcat | < 3.3.1a | 3.3.1a |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Tomcat | Versions 3.0, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.3 |