CVE-2002-2008: Apache Tomcat

Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days.

Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.

Affected products

• Apache Tomcat: version 4.0.3 only

Published 2002-12-31. Last modified 2026-06-16.