Vulnerability Details : CVE-2003-0866
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
Vulnerability category: Denial of service
Threat overview for CVE-2003-0866
Top countries where our scanners detected CVE-2003-0866
Top open port discovered on systems with this issue
80
IPs affected by CVE-2003-0866 320
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2003-0866!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2003-0866
Probability of exploitation activity in the next 30 days: 0.47%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 75 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2003-0866
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2003-0866
-
https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/-Apache Mail Archives
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1
-
http://tomcat.apache.org/security-4.html
Apache Tomcat® - Apache Tomcat 4.x vulnerabilities
-
http://www.securityfocus.com/bid/8824
Patch;Vendor Advisory
-
https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
Apache Mail Archives
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/13429
Apache Tomcat non-HTTP request denial of service CVE-2003-0866 Vulnerability Report
-
https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/-Apache Mail Archives
-
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506
#215506 - tomcat4: SECURITY: DoS attack by non-http request - Debian Bug report logsExploit;Patch;Vendor Advisory
-
http://www.vupen.com/english/advisories/2008/1979/references
Webmail: access your OVH emails on ovhcloud.com | OVHcloud
-
http://www.debian.org/security/2003/dsa-395
Debian -- Security Information -- DSA-395-1 tomcat4Patch;Vendor Advisory
Products affected by CVE-2003-0866
- cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:*