[17777] in bugtraq
RESIN ServletExec JSP Source Disclosure Vulnerability(Resin Web
daemon@ATHENA.MIT.EDU (benjurry)
Thu Nov 23 22:18:17 2000
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0028_01C05472.11431DB0"
Message-Id: <000501c0542f$27f5a520$3300a8c0@dudu>
Date: Wed, 22 Nov 2000 10:50:45 +0800
Reply-To: benjurry <benjurry@YEAH.NET>
From: benjurry <benjurry@YEAH.NET>
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
------=_NextPart_000_0028_01C05472.11431DB0
Content-Type: text/plain;
charset="gb2312"
Content-Transfer-Encoding: base64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------=_NextPart_000_0028_01C05472.11431DB0
Content-Type: text/html;
charset="gb2312"
Content-Transfer-Encoding: base64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------=_NextPart_000_0028_01C05472.11431DB0--