Oracle 9i Application Server vulnerability

Posted at Help Net Security: “The Oracle 9i Application Server uses the Apache web server for HTTP service. However, if a request is made for a non-existent .jsp file, the complete path is shown.”