Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.
No PoCs from references.
- https://github.com/m3n0sd0n4ld/uCVE