2d0baff5f5
News & Status page: A security vulnerability has been confirmed to exist in Apache Tomcat 4.0.x releases (including Tomcat 4.0.5), which allows to use a specially crafted URL to return the unprocessed source of a JSP page, or, under special circumstances, a static resource which would otherwise have been protected by security constraint, without the need for being properly authenticated. This is based on a variant of the exploit that was disclosed on 09/24/2002. See: http://jakarta.apache.org/builds/jakarta-tomcat-4.0/release/v4.0.6/RELEASE-NOTES
1 line
69 B
Text
1 line
69 B
Text
MD5 (jakarta-tomcat-4.0.6.tar.gz) = 643f334059afa719a3d0bc1b04ac7504
|