Apache Tomcat 3.1 Path Revealing Vulnerability

Bugtraq ID:	1531
Class:	Design Error
CVE:	CVE-2000-0759
Remote:	Yes
Local:	No
Published:	Jul 20 2000 12:00AM
Updated:	Jul 11 2009 02:56AM
Credit:	This vulnerability was posted to the Bugtraq mailing list on July 20, 2000 by ET LoWNOISE <[email protected]>
Vulnerable:	Apache Tomcat 3.1 - BSDI BSD/OS 4.0 - Caldera OpenLinux 2.4 - Debian Linux 2.2 - Debian Linux 2.1 - Digital UNIX 4.0 - FreeBSD FreeBSD 5.0 - FreeBSD FreeBSD 4.0 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - NetBSD NetBSD 1.4.2 x86 - NetBSD NetBSD 1.4.1 x86 - Redhat Linux 6.2 i386 - Redhat Linux 6.1 i386 - SGI IRIX 6.5 - SGI IRIX 6.4 - Sun Solaris 8_sparc - Sun Solaris 7.0 Apache Tomcat 3.0 - BSDI BSD/OS 4.0 - Caldera OpenLinux 2.4 - Debian Linux 2.2 - Debian Linux 2.1 - Digital UNIX 4.0 - FreeBSD FreeBSD 5.0 - FreeBSD FreeBSD 4.0 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - NetBSD NetBSD 1.4.2 x86 - NetBSD NetBSD 1.4 x86 - Redhat Linux 6.2 i386 - Redhat Linux 6.1 i386 - SGI IRIX 6.5 - SGI IRIX 6.4 - Sun Solaris 8_sparc - Sun Solaris 7.0 Apache JSP 1.1 + Apache Tomcat 3.1
Not Vulnerable:	Apache Tomcat 3.1.1

Apache Tomcat 3.1 Path Revealing Vulnerability

A vulnerability exists in the JSP portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent JSP file, too much information is presented by the server as part of the error message. This information may be useful to a would be attacker in conducting further attacks.

Apache Tomcat 3.1 Path Revealing Vulnerability

http://narco.guerrilla.sucks.co:8080/anything.jsp

Error: 404
Location: /anything.jsp

JSP file "/appsrv2/jakarta-tomcat/webapps/ROOT/anything.jsp" not found

Apache Tomcat 3.1 Path Revealing Vulnerability

Solution:
This issue has been resolved in version 3.1.1 and later.


Apache Tomcat 3.0

• Apache Software Foundation Jakarta Tomcat 3.3.1a
  http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Apache Tomcat 3.1

• Apache Software Foundation Jakarta Tomcat 3.3.1a
  http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/

Apache Tomcat 3.1 Path Revealing Vulnerability

References:

• Apache Software Foundation Homepage (Apache Software Foundation)
  
• Tomcat Homepage (Apache Software Foundation)