CVE-2000-0759

Description

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Affected products

• apache / Tomcat3.1 – 3.1

References

• MISChttp://www.securityfocus.com/bid/1531
• MISChttp://www.iss.net/security_center/static/4967.php
• MISChttp://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org