CVE-2000-0759

Jakarta Tomcat 3.1 - Info Disclosure

Title source: llm

Description

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Exploits (1)

exploitdb WRITEUP VERIFIED

by ET LoWNOISE · textremotemultiple

https://www.exploit-db.com/exploits/20131

View Code ZIP pw:eip

References (3)

[Third Party Advisory] http://www.iss.net/security_center/static/4967.php

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/1531

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org

Scores

EPSS 0.3982

EPSS Percentile 97.3%

Details

Status published

Products (2)

apache/tomcat 3.1

org.apache.tomcat/tomcat 0Maven

Published Oct 20, 2000

Tracked Since Feb 18, 2026