Lucene search

K
exploitdbET LoWNOISEEDB-ID:20131
HistoryJul 20, 2000 - 12:00 a.m.

Apache Tomcat 3.1 - Path Revealing

2000-07-2000:00:00
ET LoWNOISE
www.exploit-db.com
15

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/1531/info

A vulnerability exists in the JSP portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent JSP file, too much information is presented by the server as part of the error message. This information may be useful to a would be attacker in conducting further attacks. 

http://narco.guerrilla.sucks.co:8080/anything.jsp

Error: 404
Location: /anything.jsp

JSP file "/appsrv2/jakarta-tomcat/webapps/ROOT/anything.jsp" not found 

AI Score

7.4

Confidence

Low