thedark
Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
 Posted: Thu Aug 04, 2005 12:23 am Post subject: Tomcat |
 |
|
| A security vulnerability has been confirmed to exist in Apache Tomcat4.0.x releases (including Tomcat 4.0.5), which allows to use a speciallycrafted URL to return the unprocessed source of a JSP page, or, underspecial circumstances, a static resource which would otherwise have beenprotected by security constraint, without the need for being properlyauthenticated. This is based on a variant of the exploit that wasdisclosed on 09/24/2002.Read the full disclosure athttp://marc.theaimsgroup.com/?l=tomcat-dev...17249325526&w=2 |
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
