Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-2007
CVE-2002-2007
Description
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
10- cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.htmlnvdExploit
- cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.htmlnvdExploit
- www.securityfocus.com/bid/4876nvdExploit
- www.securityfocus.com/bid/4877nvdExploit
- www.securityfocus.com/bid/4878nvdExploit
- www.kb.cert.org/vuls/id/116963nvdUS Government Resource
- www.iss.net/security_center/static/9208.phpnvd
- www.procheckup.com/security_info/vuln_pr0205.htmlnvd
- www.procheckup.com/security_info/vuln_pr0206.htmlnvd
- www.procheckup.com/security_info/vuln_pr0207.htmlnvd
News mentions
0No linked articles in our index yet.