CVE-2000-0760 Information

Description

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.

Reference

http://www.securityfocus.com/bid/1532 http://www.securityfocus.com/frames/?content=/templates/archive.pike3Flist3D126date3D2000-07-1526msg3DPine.SUN.3.96.1000719235404.24004A-100000@grex.cyberspace.org