Jakarta Tomcat 3.x/4.0 – Error Message Information Disclosure

漏洞ID	1053552	漏洞类型
发布时间	2001-08-16	更新时间	2001-08-16
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Unix	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/21073

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/3199/info

When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver, which may aid in further attacks.

Jakarta Tomcat can be configured to display an alternate error file. By default it is not. 

http://webserver.com/java.jsp

相关推荐: MySQL Authentication Algorithm Vulnerability

MySQL Authentication Algorithm Vulnerability 漏洞ID 1103778 漏洞类型 Design Error 发布时间 2000-10-23 更新时间 2000-10-23 CVE编号 N/A CNNVD-ID N/A…