CVE-2000-0760

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

62.50% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium

Published

2000-09-21

Updated

2024-08-08

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0760.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20132

References

• CVE Record
• NVD entry

Related

• CVE-2000-0759
• CVE-2000-0763
• CVE-2000-0757
• CVE-2000-0766
• CVE-2000-0751
• CVE-2000-0775