CVE-2003-0043

N/A Unknown

Published: February 07, 2003 Modified: April 16, 2026

Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Source: cve@mitre.org

Vendor Advisory

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt

Source: cve@mitre.org

Vendor Advisory

http://www.ciac.org/ciac/bulletins/n-060.shtml

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-246

Source: cve@mitre.org

http://www.securityfocus.com/advisories/5111

Source: cve@mitre.org

http://www.securityfocus.com/bid/6722

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11195

Source: cve@mitre.org

http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/