CVE

Id
2814  
CVE No.
CVE-2000-1247  
Status
Candidate  
Description
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.  
Phase
Assigned (20111004)  
Votes
None (candidate not yet proposed)  
Comments