medium6.4Public exploit code
CVE-2000-0760
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tomcat 3.0/3.1 Snoop Servlet - Information Disclosure2000-07-20 · remote · multiple · Verified
Impact
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Tomcat | Versions 3.0, 3.1 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/1532
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org
- http://www.securityfocus.com/bid/1532
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org