{"id":"CVE-2002-2006","state":"PUBLISHED","title":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via t","description":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.","publishedAt":"2005-07-14T04:00:00.000Z","updatedAt":"2024-08-08T03:51:16.494Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://tomcat.apache.org/security-4.html","http://secunia.com/advisories/30908","http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1","http://secunia.com/advisories/30899","http://www.vupen.com/english/advisories/2008/1979/references","http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html","http://www.securityfocus.com/bid/4575","http://www.iss.net/security_center/static/8932.php","https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E"],"weaknesses":[],"ingestedAt":"2026-10-29T19:26:46.617Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2002/2xxx/CVE-2002-2006.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2002-2006","state":"PUBLISHED","datePublished":"2005-07-14T04:00:00.000Z","dateUpdated":"2024-08-08T03:51:16.494Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2005-07-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://tomcat.apache.org/security-4.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/30908","name":"30908","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1","name":"239312","tags":["vendor-advisory","x_refsource_SUNALERT"]},{"url":"http://secunia.com/advisories/30899","name":"30899","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/1979/references","name":"ADV-2008-1979","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html","name":"20020422 Tomcat real path disclosure (2)","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/4575","name":"4575","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.iss.net/security_center/static/8932.php","name":"tomcat-example-class-information(8932)","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2020-02-13T16:07:20.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2002-04-22T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-2006","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://tomcat.apache.org/security-4.html","refsource":"CONFIRM","url":"http://tomcat.apache.org/security-4.html"},{"name":"30908","refsource":"SECUNIA","url":"http://secunia.com/advisories/30908"},{"name":"239312","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1"},{"name":"30899","refsource":"SECUNIA","url":"http://secunia.com/advisories/30899"},{"name":"ADV-2008-1979","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1979/references"},{"name":"20020422 Tomcat real path disclosure (2)","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html"},{"name":"4575","refsource":"BID","url":"http://www.securityfocus.com/bid/4575"},{"name":"tomcat-example-class-information(8932)","refsource":"XF","url":"http://www.iss.net/security_center/static/8932.php"},{"name":"[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","refsource":"MLIST","url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E"},{"name":"[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","refsource":"MLIST","url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E"},{"name":"[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/","refsource":"MLIST","url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://tomcat.apache.org/security-4.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/30908","name":"30908","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1","name":"239312","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"http://secunia.com/advisories/30899","name":"30899","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1979/references","name":"ADV-2008-1979","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html","name":"20020422 Tomcat real path disclosure (2)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/4575","name":"4575","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.iss.net/security_center/static/8932.php","name":"tomcat-example-class-information(8932)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-08T03:51:16.494Z"}}]}}}