First published: Sat Aug 31 2002(Updated: )
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apache Tomcat | =4.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0936 is classified as a denial of service vulnerability, which can crash the Tomcat web server.
To fix CVE-2002-0936, upgrade your Apache Tomcat to a version higher than 4.0.3 that addresses this vulnerability.
CVE-2002-0936 specifically affects Apache Tomcat version 4.0.3.
Exploiting CVE-2002-0936 can lead to a denial of service, causing the web server to crash and become unavailable.
Prevent exploitation of CVE-2002-0936 by applying the latest patches to Apache Tomcat and avoiding the use of WPrinterJob().pageSetup() in JSP pages.