RE: JSP Security exposure (from usenet)

[Winchester Terry <terry.winchester@xxxxxxxxxxxxxxx>]

> -----Original Message-----
> From: Hall, Philip [mailto:phall@spss.com]
> Sent: Wednesday, November 14, 2001 2:44 PM
> To: 'midrange-l@midrange.com'
> Subject: RE: JSP Security exposure (from usenet)
>
>
> Brad,
>
> > Hey, I just read this on Usenet.  I don't recall seeing it
> > here.
> >
> > Apparently if you call a JSP and end it with a slash "/" it
> > will show the source for the JSP.
>
> You should subscribe to the security400@midrange.com list
> too, I posted
> about this a nearly a week ago, you'd have known sooner, and
> of a way to
> plug it too.
>
> --phil

Phil,

Where is the Security list identified at midrange.com?  These
are the only lists that I could find on the main page:

MIDRANGE-L
MIDRANGE-NONTECH
MIDRANGE-JOBS
BPCS-L
MAPICS-L
JBAUSERS-L
RPG400-L
JAVA400-L
JAVA101
C400-L
COBOL400-L
CODE400-L
LINUX5250
DOMINO400
MI400
CONSULT400
OPENERP400
PERL400
WEB400
Midrange Events
J.D. Edwards

Thanks,
Terry
(who is apparently blind in one eye, and can't see out the other :)