Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0042. PoCs published by Jouko Pynnönen.
AI-analyzed exploit summary This exploit demonstrates a directory traversal and file disclosure vulnerability in Apache Tomcat when used with JDK 1.3.1 or earlier. It leverages improper handling of null bytes and backslash characters to access restricted files and directories.
Description
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
Exploits (1)
This exploit demonstrates a directory traversal and file disclosure vulnerability in Apache Tomcat when used with JDK 1.3.1 or earlier. It leverages improper handling of null bytes and backslash characters to access restricted files and directories.