CVE-2003-0042

CVE-2003-0042 describes a directory listing and source code disclosure vulnerability affecting Apache Tomcat versions prior to 3.3.1a when used with JDK 1.3.1 or earlier. Attackers can exploit this by injecting a null character into a URL, bypassing existing index files to list directories or retrieve unprocessed JSP source code. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to information disclosure. While not listed on the KEV catalog or Hot List, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.