Bugtraq mailing list archives
JSP processor 1.1 information disclosure
From: Andy <andrewpremote () yahoo co uk>
Date: 13 Nov 2002 14:38:54 -0000
I've been working with IBM http server 1.0 on AS/400 and when requesting a JSP page that doesn't exist the JSP processor returns recursive error with a listing of information including the root paths and versions of servlets that run on the server. Is this a known vulnerability/misconfiguration?
Current thread:
- JSP processor 1.1 information disclosure Andy (Nov 16)