Skip to content
OpenAdvisories
Unscored DSA-395 1 CVE

tomcat4 - incorrect input handling

Published Oct 15, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 tomcat4 4.0.3-3woody3

Vulnerabilities 1

  • Medium —
    CVE-2003-0866 Public exploit EPSS 35%

    Apache Tomcat Denial of Service vulnerability in the Catalina package

    The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.

    org.apache.tomcat:tomcat Maven