Apache Tomcat 3.1 - Path Revealing
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Apache Tomcat < 3.2.1 Nonexistent File Error Message Path Disclosure | 20 Aug 200400:00 | – | nessus |
| Apache Tomcat Nonexistent File Error Message Path Disclosure | 25 Nov 200100:00 | – | nessus |
 | CVE-2000-0759 | 21 Sep 200004:00 | – | cve |
 | CVE-2000-0759 | 21 Sep 200004:00 | – | cvelist |
 | Jakarta Apache Tomcat Reveals Physical Paths | 30 Apr 202218:14 | – | github |
 | CVE-2000-0759 | 20 Oct 200004:00 | – | nvd |
 | GHSA-QG4G-6JCQ-RW93 Jakarta Apache Tomcat Reveals Physical Paths | 30 Apr 202218:14 | – | osv |
 | Fixed in Apache Tomcat 3.2 | 21 Jul 200000:00 | – | tomcat |
 | Information Disclosure | 25 Mar 201908:40 | – | veracode |
source: https://www.securityfocus.com/bid/1531/info
A vulnerability exists in the JSP portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent JSP file, too much information is presented by the server as part of the error message. This information may be useful to a would be attacker in conducting further attacks.
http://narco.guerrilla.sucks.co:8080/anything.jsp
Error: 404
Location: /anything.jsp
JSP file "/appsrv2/jakarta-tomcat/webapps/ROOT/anything.jsp" not foundData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
31 Jul 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.4
EPSS0.2566