CVE-2000-0759
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
- EPSS
- 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qg4g-6jcq-rw93 | Maven | org.apache.tomcat:tomcat | <=3.1 | no fix published |
References
- http://www.iss.net/security_center/static/4967.php
- http://www.securityfocus.com/bid/1531
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org
- http://www.iss.net/security_center/static/4967.php
- http://www.securityfocus.com/bid/1531