BugTraq
JSP processor 1.1 information disclosure Nov 13 2002 02:38PM
Andy (andrewpremote yahoo co uk)


I've been working with IBM http server 1.0 on AS/400 and when requesting a

JSP page that doesn't exist the JSP processor returns recursive error with

a listing of information including the root paths and versions of servlets

that run on the server.

Is this a known vulnerability/misconfiguration?

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus