| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.tomcat:tomcat | ≥ 4.0.0, < 4.0.5≥ 4.1.0, < 4.1.12 | 4.0.54.1.12 |
| tomcat | = 3.0= 3.1= 3.1.1= 3.2= 3.2.1= 3.2.2= 3.2.3= 3.2.4= 3.3= 3.3.1= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.1.0= 4.1.10= 4.1.3= 4.1.9 |
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free