Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tomcat/tomcat@4.0
Typemaven
Namespaceorg.apache.tomcat
Nametomcat
Version4.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.0.2
Latest_non_vulnerable_version11.0.18
Affected_by_vulnerabilities
0
url VCID-x9v1-6ysy-bfcm
vulnerability_id VCID-x9v1-6ysy-bfcm
summary
Apache Tomcat Denial of Service vulnerability in the Catalina package
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
references
0
reference_url http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506
reference_id
reference_type
scores
url http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506
1
reference_url http://secunia.com/advisories/30899
reference_id
reference_type
scores
url http://secunia.com/advisories/30899
2
reference_url http://secunia.com/advisories/30908
reference_id
reference_type
scores
url http://secunia.com/advisories/30908
3
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/13429
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/13429
4
reference_url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
7
reference_url http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1
reference_id
reference_type
scores
url http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1
8
reference_url http://tomcat.apache.org/security-4.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-4.html
9
reference_url http://www.debian.org/security/2003/dsa-395
reference_id
reference_type
scores
url http://www.debian.org/security/2003/dsa-395
10
reference_url http://www.securityfocus.com/bid/8824
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/8824
11
reference_url http://www.vupen.com/english/advisories/2008/1979/references
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2008/1979/references
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2003-0866
reference_id CVE-2003-0866
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2003-0866
13
reference_url https://github.com/advisories/GHSA-7wj2-48c4-2684
reference_id GHSA-7wj2-48c4-2684
reference_type
scores
url https://github.com/advisories/GHSA-7wj2-48c4-2684
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.1.0
purl pkg:maven/org.apache.tomcat/tomcat@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2af1-rv9j-jugv
1
vulnerability VCID-2jws-wtvg-2khf
2
vulnerability VCID-5jm8-9upn-g7f4
3
vulnerability VCID-7787-4bwm-efgq
4
vulnerability VCID-96yu-fvee-wfbs
5
vulnerability VCID-ccfn-tde4-s7hr
6
vulnerability VCID-crhe-rt8j-wycu
7
vulnerability VCID-eygg-nt7y-qubh
8
vulnerability VCID-hmqa-jhuf-hfe2
9
vulnerability VCID-kxc3-vz2c-wqca
10
vulnerability VCID-qz87-x4zb-rud7
11
vulnerability VCID-rdr4-db3y-p3cz
12
vulnerability VCID-sjn3-a6fs-gyck
13
vulnerability VCID-t4mh-zvhq-27du
14
vulnerability VCID-wg7f-pjmn-uudk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.0
aliases CVE-2003-0866, GHSA-7wj2-48c4-2684
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x9v1-6ysy-bfcm
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.0