CVE-2003-0866
apache tomcat: no CVSS score yet. EPSS 35% chance of exploitation in the next 30 days. Fixed in org.apache.tomcat:tomcat 4.1.0.
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
- EPSS
- 35% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-7wj2-48c4-2684 | Maven | org.apache.tomcat:tomcat | >=4.0 <4.1.0 | 4.1.0 |