exploits , vulnerabilities , articles , Jakarta Tomcat Error Message Information Disclosure Vulnerability

Title	Jakarta Tomcat Error Message Information Disclosure Vulnerability
Published	2001-08-16-12:00AM
Updated	2001-11-23-10:28PM
Class	Configuration Error
CVE	CVE-2001-0917
Remote	No
Local	Yes
Credit	This vulnerability was originally reported by ET LoWNOISE <et@cyberspace.org>
Vulnerable	HP HPUX (VVOS) 11.0 4 Apache Software Foundation Tomcat 4.0.1 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 3.3 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 4.0 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 3.3 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 3.2.1 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 3.2 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 3.1 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Conectiva Linux 5.1 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4.1 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0 Apache Software Foundation Tomcat 3.0 BSDI BSD/OS 4.0 Caldera OpenLinux 2.4 Debian Linux 2.1 Debian Linux 2.2 Digital UNIX 4.0 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 NetBSD NetBSD 1.4 x86 NetBSD NetBSD 1.4.2 x86 RedHat Linux 6.1 i386 RedHat Linux 6.2 i386 SGI IRIX 6.4 SGI IRIX 6.5 Sun Solaris 7.0 Sun Solaris 8.0
Not Vulnerable
Code	An example of an HTTP request that would cause an exception to be thrown is: http://webserver.com/java.jsp
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability