TUCoPS :: Web :: Apps

TUCoPS :: Web :: Apps :: tomcat.htm
Snoop Servlet gives up too much sensitive site info

Vulnerability

    Snoop Servlet

Affected

    Tomcat 3.1 and 3.0

Description

    Following was found by ET  LoWNOISE.  The Snoop Servlet  will give
    you too much info (PATHs, OS, etc.).  To exploit, just do:

        http://narco.guerrilla.sucks.co:8080/examples/jsp/snp/anything.snp

Solution

    Nothing yet.