Beveiligingsadvies

CVE-2005-4703

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-02-01 20:00:00
Laatst bijgewerkt 2024-08-07 23:53:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.