Re: Retrieve server.built, server.number

2024-04-15 Thread Christopher Schultz
On 4/11/24 10:59, Mark Thomas wrote: On 11/04/2024 15:49, Bill Stewart wrote: On Wed, Apr 10, 2024 at 2:14 PM Mark Thomas wrote: ... and it might represent an information leakage vulnerability in your application. Be Careful. Shall we start the flame war now on whether exposing the

Re: Retrieve server.built, server.number

2024-04-11 Thread Mark Thomas
On 11/04/2024 15:49, Bill Stewart wrote: On Wed, Apr 10, 2024 at 2:14 PM Mark Thomas wrote: ... and it might represent an information leakage vulnerability in your application. Be Careful. Shall we start the flame war now on whether exposing the current version you are running

Re: Retrieve server.built, server.number

2024-04-11 Thread Bill Stewart
On Wed, Apr 10, 2024 at 2:14 PM Mark Thomas wrote: > ... and it might represent an information leakage vulnerability in your > > application. Be Careful. > > Shall we start the flame war now on whether exposing the current version > you are running represents a valid vulnerability or if hiding

Re: Retrieve server.built, server.number

2024-04-11 Thread Christopher Schultz
Mark, On 4/10/24 16:12, Mark Thomas wrote: On 10/04/2024 21:15, Christopher Schultz wrote: All, On 4/10/24 4:00 AM, Mark Thomas wrote: On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke

RE: Retrieve server.built, server.number

2024-04-10 Thread Mcalexander, Jon J.
Sent: Wednesday, April 10, 2024 3:13 PM To: users@tomcat.apache.org Subject: Re: Retrieve server.built, server.number On 10/04/2024 21: 15, Christopher Schultz wrote: > All, > > On 4/10/24 4: 00 AM, Mark Thomas wrote: >> On 09/04/2024 17: 17, prat 007 wrote: >>> Hi All,

Re: Retrieve server.built, server.number

2024-04-10 Thread Mark Thomas
On 10/04/2024 21:15, Christopher Schultz wrote: All, On 4/10/24 4:00 AM, Mark Thomas wrote: On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke curl or from browser? In a default

Re: Retrieve server.built, server.number

2024-04-10 Thread Christopher Schultz
All, On 4/10/24 4:00 AM, Mark Thomas wrote: On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke curl or from browser? In a default installation, no. You'd have to write a servlet that

Re: Retrieve server.built, server.number

2024-04-10 Thread Mark Thomas
On 09/04/2024 17:17, prat 007 wrote: Hi All, I would like to know is there a way to find tomcat's server.built and server.number remotely using tool loke curl or from browser? In a default installation, no. You'd have to write a servlet that reported that information and then request that