tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sankaranarayanan \(Ganesh\) Ganapathy" <>
Subject httpd trace and tomcat
Date Thu, 08 Apr 2004 17:51:42 GMT
Hi All,


It was brought to my attention that tomcat by default runs httpd trace
and that it is a potential security hole. I don't understand what httpd
trace is - can somebody explain? 

Is there a way to control this in tomcat (turning it on and off?)


Thanks in advance!


  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message