CVE-2000-0759

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-10-20 · updated 2026-06-16

Description

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Affected products

Apache Tomcat: 3.1

References

http://www.iss.net/security_center/static/4967.php
http://www.securityfocus.com/bid/1531
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org
http://www.iss.net/security_center/static/4967.php
http://www.securityfocus.com/bid/1531
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org

Get alerted when CVE-2000-0759 or the next vulnerability affects your stack