CVE-2002-2006

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

30.67% chance of exploitation in the next 30 days, 98th percentile

Published

2005-07-14

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21412

References

• CVE Record
• NVD entry

Related

• CVE-2002-20001
• CVE-2002-2007
• CVE-2002-1998
• CVE-2002-2011
• CVE-2002-1995
• CVE-2002-2013