CVE-2002-0935 — Uncontrolled Resource Consumption in Apache Tomcat

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
2.8%
top 13.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Tomcat
Timeline
PublishedOct 4
Latest updateApr 30

Description

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/tomcat4.0.3

Patches

Patch: www.iss.net ↗Patch: www.securityfocus.com ↗Patch: www.iss.net ↗

🔴Vulnerability Details

3
OSV
Apache Tomcat DoS Via Requests Including Null Characters↗2022-04-30
▶
GHSA
Apache Tomcat DoS Via Requests Including Null Characters↗2022-04-30
▶
CVEList
CVE-2002-0935: Apache Tomcat 4↗2003-04-02
▶
CVE-2002-0935 — Uncontrolled Resource Consumption | cvebase