CVE-2003-0045

描述

Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.

如何修補 CVE-2003-0045

要修補 CVE-2003-0045,請將受影響套件升級到下列已修補版本。

• Maven/org.apache.tomcat:tomcat—升級至 3.3.1a 或更新版本

CVE-2003-0045 正在被利用嗎?

低 — EPSS 為 2.5%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 3.3.1a

參考連結(3)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2003-0045
• WEBjakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt
• WEBexchange.xforce.ibmcloud.com/vulnerabilities/12102