Search for vulnerabilities
Vulnerability details: VCID-71ur-fpse-aaad
Vulnerability ID VCID-71ur-fpse-aaad
Aliases CVE-2000-0759
GHSA-qg4g-6jcq-rw93
Summary Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.15904 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.44512 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.44512 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.44512 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.44512 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.60073 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
apache_tomcat Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-qg4g-6jcq-rw93
cvssv2 6.4 https://nvd.nist.gov/vuln/detail/CVE-2000-0759
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2000-0759
http://www.iss.net/security_center/static/4967.php
http://www.securityfocus.com/bid/1531
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000@grex.cyberspace.org
cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*
CVE-2000-0759 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759
CVE-2000-0759 https://nvd.nist.gov/vuln/detail/CVE-2000-0759
CVE-2000-0759;OSVDB-674 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/20131.txt
CVE-2000-0759;OSVDB-674 Exploit https://www.securityfocus.com/bid/1531/info
GHSA-qg4g-6jcq-rw93 https://github.com/advisories/GHSA-qg4g-6jcq-rw93
Data source Exploit-DB
Date added July 20, 2000
Description Apache Tomcat 3.1 - Path Revealing
Ransomware campaign use Known
Source publication date July 20, 2000
Exploit type remote
Platform multiple
Source update date July 31, 2012
Source URL https://www.securityfocus.com/bid/1531/info
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2000-0759
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.96076
EPSS Score 0.15904
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.