You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2001/11/21 17:51:15 UTC

DO NOT REPLY [Bug 5004] - /a/b/c/nonexistent.jsp -> a file and directory chain created. attack risk

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5004>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=5004

/a/b/c/nonexistent.jsp -> a file and directory chain created. attack risk





------- Additional Comments From tagunov@motor.ru  2001-11-21 08:51 -------
This bug has been reported as bug 5005 for tomcat 3.3

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>