Jakarta Tomcat Error Message Information Disclosure Vulnerability
BID:3199
Info
Jakarta Tomcat Error Message Information Disclosure Vulnerability
| Bugtraq ID: | 3199 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 16 2001 12:00AM |
| Updated: | Aug 16 2001 12:00AM |
| Credit: | This vulnerability was originally reported by ET LoWNOISE <[email protected]> |
| Vulnerable: |
HP HP-UX (VVOS) 11.0 4 Apache Tomcat 4.0.1 Apache Tomcat 4.0 Apache Tomcat 3.3 Apache Tomcat 3.2.1 Apache Tomcat 3.2 Apache Tomcat 3.1 Apache Tomcat 3.0 |
| Not Vulnerable: | |
Discussion
Jakarta Tomcat Error Message Information Disclosure Vulnerability
When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver, which may aid in further attacks.
Jakarta Tomcat can be configured to display an alternate error file. By default it is not.
When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver, which may aid in further attacks.
Jakarta Tomcat can be configured to display an alternate error file. By default it is not.
Solution / Fix
Jakarta Tomcat Error Message Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
HP HP-UX (VVOS) 11.0 4
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
HP HP-UX (VVOS) 11.0 4
-
HP PHSS_24823
http://itrc.hp.com -
HP PHSS_25221
http://itrc.hp.com