[15869] in bugtraq
[LoWNOISE] Tomcat 3.1 Path Revealing Problem.
daemon@ATHENA.MIT.EDU (ET LoWNOISE)
Thu Jul 20 17:01:08 2000
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.SUN.3.96.1000719184401.17782A-100000@grex.cyberspace.org>
Date: Wed, 19 Jul 2000 18:45:13 -0400
Reply-To: ET LoWNOISE <et@CYBERSPACE.ORG>
From: ET LoWNOISE <et@CYBERSPACE.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
[LoWNOISE] Tomcat 3.1 Path Revealing Problem.
====PRODUCT:
Release Build 3.1 of Tomcat from Apache Software Foundation.
Tomcat is the combined JSP 1.1 and Servlets 2.2 reference
implementation being developed under the Apache process.
http://jakarta.apache.org
====PROBLEM:
Path Revealing Problem0.
http://narco.guerrilla.sucks.co:8080/anything.jsp
Error: 404
Location: /anything.jsp
JSP file "/appsrv2/jakarta-tomcat/webapps/ROOT/anything.jsp" not found
====
Efrain 'ET' Torres
et@cyberspace.org
[LoWNOISE] Colombia 2000