I just found a public WWW site running Tomcat on an NT
box and they have the same problem!

Greg Wilkins wrote:
> There is a security hole on Jetty 3 servers running on NT or
> other case insensitive file systems.  The problem allows
> security constrainst protecting files within the docroot
> to be accessed by using different combinations of
> character case.

-- 
Greg Wilkins<[EMAIL PROTECTED]>          GB  Phone: +44-(0)2074394045
Mort Bay Consulting Australia and UK.    Mbl Phone: +44-(0)7775534369
http://www.mortbay.com                   AU  Phone: +61-(0)2 99772395


--
--------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Problems?:           [EMAIL PROTECTED]

Reply via email to