Vulnerabilities > CVE-2002-1567 - Unspecified vulnerability in Apache Tomcat 4.1.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | Apache Tomcat 4.1 JSP Request Cross Site Scripting Vulnerability. CVE-2002-1567. Remote exploit for unix platform |
id | EDB-ID:21734 |
last seen | 2016-02-02 |
modified | 2002-08-21 |
published | 2002-08-21 |
reporter | Skinnay |
source | https://www.exploit-db.com/download/21734/ |
title | Apache Tomcat 4.1 - JSP Request Cross-Site Scripting Vulnerability |
Nessus
NASL family | CGI abuses : XSS |
NASL id | TOMCAT_4_1_XSS.NASL |
description | The version of Apache Tomcat running on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize request strings of malicious JavaScript. A remote, unauthenticated attacker can exploit this to execute arbitrary code by using a URL containing encoded newline characters that are followed by a request to a .jsp file that has a crafted file name. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 47715 |
published | 2010-07-14 |
reporter | This script is Copyright (C) 2010-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/47715 |
title | Apache Tomcat 4.1 XSS |
code |
|
References
- http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html
- http://tomcat.apache.org/security-4.html
- https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E