Search for packages
| purl | pkg:apache/tomcat@3.3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6yk2-f8d5-cyc3
Aliases: CVE-2003-0043 GHSA-cvx5-7vc7-rg77 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file. | There are no reported fixed by versions. |
|
VCID-shq7-jxup-5fgk
Aliases: CVE-2003-0042 GHSA-qfw2-wvrw-mvw4 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-9rpn-zb26-yfdk | Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp. |
CVE-2003-0045
GHSA-w97x-xfxf-f9xj |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T12:38:21.031409+00:00 | Apache Tomcat Importer | Fixing | VCID-9rpn-zb26-yfdk | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.981187+00:00 | Apache Tomcat Importer | Affected by | VCID-shq7-jxup-5fgk | https://tomcat.apache.org/security-3.html | 38.0.0 |
| 2026-04-01T12:38:20.931298+00:00 | Apache Tomcat Importer | Affected by | VCID-6yk2-f8d5-cyc3 | https://tomcat.apache.org/security-3.html | 38.0.0 |