Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4703. PoCs published by security curmudgeon.
AI-analyzed exploit summary This exploit leverages an information-disclosure vulnerability in Apache Tomcat by sending a request containing an MS-DOS device name (e.g., 'lpt9.xtp'). The vulnerability allows attackers to retrieve sensitive data due to improper handling of such requests.
Description
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.
Exploits (1)
This exploit leverages an information-disclosure vulnerability in Apache Tomcat by sending a request containing an MS-DOS device name (e.g., 'lpt9.xtp'). The vulnerability allows attackers to retrieve sensitive data due to improper handling of such requests.