Description
IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).
References
- ibm-http-path-disclosure(10628) vdb-entry
- 6181 vdb-entry
- 20021113 JSP processor 1.1 information disclosure mailing-list