CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-2006

The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.324

EPSS Ranking 96.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2002-2006

Apache » Tomcat » Version: 3.0

cpe:2.3:a:apache:tomcat:3.0
Apache » Tomcat » Version: 3.1

cpe:2.3:a:apache:tomcat:3.1
Apache » Tomcat » Version: 3.1.1

cpe:2.3:a:apache:tomcat:3.1.1
Apache » Tomcat » Version: 3.2

cpe:2.3:a:apache:tomcat:3.2
Apache » Tomcat » Version: 3.2.1

cpe:2.3:a:apache:tomcat:3.2.1
Apache » Tomcat » Version: 3.2.3

cpe:2.3:a:apache:tomcat:3.2.3
Apache » Tomcat » Version: 3.2.4

cpe:2.3:a:apache:tomcat:3.2.4
Apache » Tomcat » Version: 3.3

cpe:2.3:a:apache:tomcat:3.3
Apache » Tomcat » Version: 3.3.1

cpe:2.3:a:apache:tomcat:3.3.1
Apache » Tomcat » Version: 4.0.0

cpe:2.3:a:apache:tomcat:4.0.0
Apache » Tomcat » Version: 4.0.1

cpe:2.3:a:apache:tomcat:4.0.1
Apache » Tomcat » Version: 4.0.2

cpe:2.3:a:apache:tomcat:4.0.2
Apache » Tomcat » Version: 4.0.3

cpe:2.3:a:apache:tomcat:4.0.3
Apache » Tomcat » Version: 4.1.0

cpe:2.3:a:apache:tomcat:4.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-2006

Products

Pricing

Contact Us