You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by "NAIK,ROSHAN (HP-Cupertino,ex1)" <ro...@hp.com> on 2003/08/05 03:14:30 UTC
Tomcat shutdown port and security
Given that _anybody_ on the local machine could simply telnet to the
port and issue a "SHUTDOWN" command. Isnt the current shutdown mechanism in
Tomcat 4 a security issue ?
-- Roshan
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org
Re: Tomcat shutdown port and security
Posted by Tim Funk <fu...@joedog.org>.
In a server environment, no.
http://jakarta.apache.org/tomcat/faq/security.html#8005
-Tim
NAIK,ROSHAN (HP-Cupertino,ex1) wrote:
> Given that _anybody_ on the local machine could simply telnet to the
> port and issue a "SHUTDOWN" command. Isnt the current shutdown mechanism in
> Tomcat 4 a security issue ?
>
> -- Roshan
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org
Re: Tomcat shutdown port and security
Posted by Tim Funk <fu...@joedog.org>.
In a server environment, no.
http://jakarta.apache.org/tomcat/faq/security.html#8005
-Tim
NAIK,ROSHAN (HP-Cupertino,ex1) wrote:
> Given that _anybody_ on the local machine could simply telnet to the
> port and issue a "SHUTDOWN" command. Isnt the current shutdown mechanism in
> Tomcat 4 a security issue ?
>
> -- Roshan
>