Dear all,

Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties 
because of information disclosure concerns (TC version number)
in apache-tomcat-6.0.37, apache-tomcat-7.0.40, apache-tomcat-7.0.42 and Apache 
Tomcat/8.0.0-RC1 as mentioned in the documentation
(http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html, 
http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html)
leads to ClassNotFoundException and Tomcat cannot be started.

The older versions of Tomcat 6 and Tomcat 7 are not affected. Is this now 
intended or did I miss something?

Error message (Tomcat 8):

java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina
        at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
        at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
        at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:271)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:461)

Tomcat:

apache-tomcat-6.0.37
apache-tomcat-7.0.40
apache-tomcat-7.0.42
Tomcat/8.0.0-RC1

JDK:
Oracle jdk1.7.0_25

OS:
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 1

Thank you very much!

Reply via email to