CVE-2003-0043

CVE-2003-0043 describes a vulnerability in Apache Tomcat versions prior to 3.3.1a, specifically when used with JDK 1.3.1 or earlier. This flaw allows remote attackers to read portions of server files by exploiting how Tomcat processes the web.xml file with trusted privileges. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to information disclosure. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security professionals.