CVE-2002-0935 in Tomcat

Summary

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Disclosure: 10/04/2002
• Moderation: VulDB entry created
• Entries: VDB-18871 (1)
• CPE: ready
• CWE: CWE-404 (Confirmed)
• CVSS: 5.3
• EPSS: 0.02834
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0935
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0935
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0935/