Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
tomcat下载地址:
http://archive.apache.org/dist/tomcat/tomcat-3/archive/v3.1/bin/jakarta-tomcat.zip
测试截图: