CVE-2000-0760

Опубликовано: 20 окт. 2000

Источник: nvd

CVSS2: 6.4

EPSS Средний

Описание

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.

Ссылки

http://www.securityfocus.com/bid/1532
Exploit
Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org
http://www.securityfocus.com/bid/1532
Exploit
Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.37735

Средний

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qqr5-q566-72w2

github

около 3 лет назад