tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Elkins" <celk...@scardini.com>
Subject Fw: [LoWNOISE] Tomcat 3.1 Path Revealing Problem.
Date Thu, 20 Jul 2000 21:06:08 GMT
Hi, all.

This message was recently posted to the Bugtraq mailing list. I am forwarding it
here for those who don't monitor said list. If this problem is no longer
relevant, please disregard.

--
Christopher Elkins


----- Original Message -----
From: "ET LoWNOISE" <et@CYBERSPACE.ORG>
To: <BUGTRAQ@SECURITYFOCUS.COM>
Sent: Wednesday, July 19, 2000 3:45 PM
Subject: [LoWNOISE] Tomcat 3.1 Path Revealing Problem.


> [LoWNOISE] Tomcat 3.1 Path Revealing Problem.
>
>
> ====PRODUCT:
> Release Build 3.1 of Tomcat from Apache Software Foundation.
> Tomcat is the combined JSP 1.1 and Servlets 2.2 reference
> implementation being developed under the Apache process.
>
> http://jakarta.apache.org
>
> ====PROBLEM:
> Path Revealing Problem0.
>
> http://narco.guerrilla.sucks.co:8080/anything.jsp
>
>   Error: 404
>   Location: /anything.jsp
>
>   JSP file "/appsrv2/jakarta-tomcat/webapps/ROOT/anything.jsp" not found
>
> ====
> Efrain 'ET' Torres
> et@cyberspace.org
>
> [LoWNOISE] Colombia 2000
>
>


Mime
View raw message