CVE-2002-1895
Last modified
CVE-2002-1895 is a vulnerability of currently unknown severity. The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.. EPSS estimates a 3.88% chance of exploitation in the next 30 days.
Description
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Tomcat | 3.3 |
| Apache | Tomcat | 4.0.4 |
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.htmlExploit, Vendor Advisory
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.htmlExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-1895?
How severe is CVE-2002-1895?
How do I fix CVE-2002-1895?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-1889Off-by-one buffer overflow in the context_action function in…
- CVE-2002-1890rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to over…
- CVE-2002-1891Buffer overflow in IRCIT 0.3.1 IRC client allows remote atta…
- CVE-2002-1892NETGEAR FVS318 running firmware 1.1 stores the username and …
- CVE-2002-1893Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Se…
- CVE-2002-1894Cross-site scripting (XSS) vulnerability in viewtopic.php in…
- CVE-2002-1896Buffer overflow in Alsaplayer 0.99.71, when installed setuid…
- CVE-2002-1897MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to…
- CVE-2002-1898Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers …
- CVE-2002-1899Cross-site scripting (XSS) vulnerability in IceWarp Web Mail…
- CVE-2002-1900Cross-site scripting (XSS) vulnerability in Pinboard 1.0 all…
- CVE-2002-1901Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGal…
Are you affected by CVE-2002-1895?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST