Re: Vulnerability in Apache Tomcat

[ZhangTianqi <pnigos () live com>]

This is just the misconfiguration of Apache Tomcat, not vulnerability....

> Date: Sat, 11 Jul 2015 19:26:45 -0300
> From: gus70938 () gmail com
> To: fulldisclosure () seclists org
> Subject: [FD] Vulnerability in Apache Tomcat
>
> Hi everyone, i found a bug in servers Apache Tomcat who performs access at
> all directories.
> The bug is exploit by a Dork in Google, the
> PoC is: allintitle:"Directory Listing For / (directory like access"/"
> For example: allintitle:"Directory Listing For / root/"
> This Dork access with dir root whithout passwords and the servers are
> Apache Tomcat.
> I advice update the Apache Tomcat for fix this bug or control with login.
> Best Regards.
> By Rootkit.
>
> _______________________________________________
> Sent through the Full Disclosure mailing list
> https://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: http://seclists.org/fulldisclosure/
                                          

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/