ID de Prueba:	1.3.6.1.4.1.25623.1.0.11176
Categoría:	Web Servers
Título:	Tomcat 4.x JSP Source Exposure - Active Check
Resumen:	Tomcat 4.0.4 and 4.1.10 (probably all other earlier versions; also) are vulnerable to source code exposure by using the default servlet; org.apache.catalina.servlets.DefaultServlet.
Descripción:	Summary: Tomcat 4.0.4 and 4.1.10 (probably all other earlier versions also) are vulnerable to source code exposure by using the default servlet org.apache.catalina.servlets.DefaultServlet. Solution: Update to version 4.0.5, 4.1.12 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1148 BugTraq ID: 5786 http://www.securityfocus.com/bid/5786 Bugtraq: 20020924 JSP source code exposure in Tomcat 4.x (Google Search) http://marc.info/?l=bugtraq&m=103288242014253&w=2 Debian Security Information: DSA-170 (Google Search) http://www.debian.org/security/2002/dsa-170 HPdes Security Advisory: HPSBUX0212-229 http://online.securityfocus.com/advisories/4758 https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E http://www.redhat.com/support/errata/RHSA-2002-217.html http://www.redhat.com/support/errata/RHSA-2002-218.html http://www.iss.net/security_center/static/10175.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1394 BugTraq ID: 6562 http://www.securityfocus.com/bid/6562 Debian Security Information: DSA-225 (Google Search) http://www.debian.org/security/2003/dsa-225 http://marc.info/?l=bugtraq&m=103470282514938&w=2 http://www.redhat.com/support/errata/RHSA-2003-075.html http://www.redhat.com/support/errata/RHSA-2003-082.html XForce ISS Database: tomcat-invoker-source-code(10376) https://exchange.xforce.ibmcloud.com/vulnerabilities/10376
Copyright	Copyright (C) 2002 Felix Huber

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.