JSP processor 1.1 information disclosure

From: Andy (andrewpremoteat_private)
Date: Wed Nov 13 2002 - 06:38:54 PST

  • Next message: Matthew Dixon Cowles: "Re: Bind 8 bug experience"

    
     ('binary' encoding is not supported, stored as-is)
    I've been working with IBM http server 1.0 on AS/400 and when requesting a 
    JSP page that doesn't exist the JSP processor returns recursive error with 
    a listing of information including the root paths and versions of servlets 
    that run on the server.
    
    Is this a known vulnerability/misconfiguration?
    



    This archive was generated by hypermail 2b30 : Sat Nov 16 2002 - 06:26:44 PST