exploits , vulnerabilities , articles , Apache Tomcat Requests Containing MS-DOS Device Names Information Disclosure Vulnerability

Title	Apache Tomcat Requests Containing MS-DOS Device Names Information Disclosure Vulnerability
Published	2005-10-14-12:00AM
Updated	2008-03-27-09:59PM
Class	Design Error
CVE	CVE-2005-4703
Remote	Yes
Local	No
Credit	security curmudgeon <jericho@attrition.org>
Vulnerable	Apache Software Foundation Tomcat 4.0.3
Not Vulnerable	Apache Software Foundation Tomcat 4.1.3
Code	Attackers may launch attacks through a browser.The following example request is available:GET /lpt9.xtp
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-11-22 KVIrc URI Handler Remote Command Execution Vulnerability
• 2008-11-22 NVIDIA Cg Toolkit Installer Insecure Temporary File Creation Vulnerability
• 2008-11-22 TkUsr Insecure Temporary File Creation Vulnerability
• 2008-11-21 TAU Tuning and Analysis Utilities Insecure Temporary File Creation Vulnerabilities
• 2008-11-21 Maildirsync Insecure Temporary File Creation Vulnerability
• 2008-11-21 TkMan Insecure Temporary File Creation Vulnerability
• 2008-11-21 Apple iPhone Configuration Web Utility for Windows Directory Traversal Vulnerability
• 2008-11-21 Cisco IOS and CatOS VLAN Trunking Protocol Packet Handling Denial Of Service Vulnerability
• 2008-11-21 vBulletin Visitor Messages Addon Comment Notification HTML Injection Vulnerability
• 2008-11-21 Apple Mac OS X CoreGraphics Multiple Memory Corruption Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 22 Nov 2008 22:52:02 +0000