users@glassfish.java.net

Re: WEB-INF dot file retrieval vulnerability on Win32 boxes

From: <glassfish_at_javadesktop.org>
Date: Tue, 12 Aug 2008 08:42:58 PDT

No worries.

Mistakes happen...

Thanks for verifying the release info on the server which demonstrated the vulnerability.

I hope there aren't people out there on 9.0 any more, but this may be a good reason to consider upgrading to 9.1 if you are.

Folks can get the latest 9.1 release from here: https://glassfish.dev.java.net/downloads/v2ur2-b04.html or http://java.sun.com/javaee/downloads/index.jsp.

vbk
[Message sent by forum member 'vbkraemer' (vbkraemer)]

http://forums.java.net/jive/thread.jspa?messageID=292872