CVE-2003-0045 — Uncontrolled Resource Consumption in Apache Tomcat

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.5%
top 18.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Tomcat
Timeline
PublishedFeb 7
Latest updateApr 29

Description

Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/tomcat9 versions+8

🔴Vulnerability Details

3
OSV
Jakarta Tomcat Denial of Service vulnerability↗2022-04-29
▶
GHSA
Jakarta Tomcat Denial of Service vulnerability↗2022-04-29
▶
CVEList
CVE-2003-0045: Jakarta Tomcat before 3↗2004-09-01
▶
CVE-2003-0045 — Uncontrolled Resource Consumption | cvebase