exploits , vulnerabilities , articles , Apache Tomcat Requests Containing MS-DOS Device Names Information Disclosure Vulnerability

Title	Apache Tomcat Requests Containing MS-DOS Device Names Information Disclosure Vulnerability
Published	2005-10-14-12:00AM
Updated	2008-03-27-09:59PM
Class	Design Error
CVE	CVE-2005-4703
Remote	Yes
Local	No
Credit	security curmudgeon <jericho@attrition.org>
Vulnerable	Apache Software Foundation Tomcat 4.0.3
Not Vulnerable	Apache Software Foundation Tomcat 4.1.3
Code	Attackers may launch attacks through a browser.The following example request is available:GET /lpt9.xtp
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability
• 2009-12-04 Achievo Scheduler Category HTML Injection Vulnerability
• 2009-12-04 Yoast Google Analytics for WordPress Plugin 404 Error Page Cross Site Scripting Vulnerability
• 2009-12-04 DevIL DICOM File Handling Remote Buffer Overflow Vulnerability
• 2009-12-04 Invision Power Board Local File Include and SQL Injection Vulnerabilities
• 2009-12-04 Mozilla Firefox Yoono Extension DOM Event Handler Cross Domain Scripting Vulnerability
• 2009-12-04 UBB.threads Multiple File Include Vulnerabilities
• 2009-12-04 Expat Unspecified XML Parsing Remote Denial of Service Vulnerability
• 2009-12-04 Apple Mac OS X Java Applet Certificate Validation Security Bypass Vulnerability
• 2009-12-04 QEMU Virtio Networking Remote Denial of Service Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 05 Dec 2009 14:18:09 +0000