CVE-2002-2007

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.

• http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.htmlExploit
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.htmlExploit
• http://www.iss.net/security_center/static/9208.php
• http://www.kb.cert.org/vuls/id/116963US Government Resource
• http://www.procheckup.com/security_info/vuln_pr0205.html
• http://www.procheckup.com/security_info/vuln_pr0206.html
• http://www.procheckup.com/security_info/vuln_pr0207.html
• http://www.securityfocus.com/bid/4876Exploit
• http://www.securityfocus.com/bid/4877Exploit
• http://www.securityfocus.com/bid/4878Exploit
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.htmlExploit
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.htmlExploit
• http://www.iss.net/security_center/static/9208.php
• http://www.kb.cert.org/vuls/id/116963US Government Resource
• http://www.procheckup.com/security_info/vuln_pr0205.html
• http://www.procheckup.com/security_info/vuln_pr0206.html
• http://www.procheckup.com/security_info/vuln_pr0207.html
• http://www.securityfocus.com/bid/4876Exploit
• http://www.securityfocus.com/bid/4877Exploit
• http://www.securityfocus.com/bid/4878Exploit

Published

Dec 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-2001jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with p…
• CVE-2002-2002Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5…
• CVE-2002-2003ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows…
• CVE-2002-2004portmapper in Compaq Tru64 4.0G and 5.0A allows remote attac…
• CVE-2002-2005Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0…
• CVE-2002-2006The default installation of Apache Tomcat 4.0 through 4.1 an…
• CVE-2002-2008Apache Tomcat 4.0.3 for Windows allows remote attackers to o…
• CVE-2002-2009Apache Tomcat 4.0.1 allows remote attackers to obtain the we…
• CVE-2002-2010Cross-site scripting (XSS) vulnerability in htsearch.cgi in …
• CVE-2002-2011Cross-site scripting (XSS) vulnerability in the fom CGI prog…
• CVE-2002-2012Unknown vulnerability in Apache 1.3.19 running on HP Secure …
• CVE-2002-2013Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allow…