CVE-2001-0829

Published: Dec 6, 2001Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

Affected (1)

Products: Apache: Tomcat

Apache

1 product

Tomcat

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	Version 3.2.1

References (6)

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html

Source: cve@mitre.org

http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/2982

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/2982

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.