You may want to double-check with the people who wrote the report,
just to be sure.

I have a small site hosted on Tomcat 5.5.9 and I think the host
provider is using Apache connector --- my site often crashes and shuts
down and I sometimes see the directory structure. But it might not be
because of security vulnerability. I think it's probably because the
hosting provider shuts it down because it's very low cost. And its a
bit PITA to manually switch-off directory listing. Also even without
the vulnerability anyone can still access the manager app by using the
default URL, I should probably get it disabled.

-Rashmi

On 4/10/07, Laura McCord <[EMAIL PROTECTED]> wrote:
So, since we are using Tomcat as a standalone then this would apply, right?

Thanks,
 Laura

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to