Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Apache Tomcat Requests Containing MS-DOS Device Names Information Disclosure Vulnerability

Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names.

Attackers can leverage this issue to obtain potentially sensitive data that could aid in other attacks.

Tomcat 4.0.3 running on Windows is vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2007, SecurityFocus