CVE-2000-1247: Undefined Security Weakness

The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI...

PT-2011-1255

Name of the Vulnerable Software and Affected Versions Apache JServ version 1.1.2 Description The default configuration of the jserv-status handler in jserv.conf includes an "allow from 127.0.0.1" line. This allows local users to discover JDBC passwords or other sensitive information via a direct...