CVE-2005-4703

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device…

published February 1, 2006

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25672 · 98.0th percentile
Published
2006-02-01T20:00Z
EPSS history
Timeline
  • 01 FEB 20:00Z
    Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device…
    cvelistv5