The Bea Weblogic server v4.1 sp2 on Windows 2000 incorrectly parses certain types of URL requests, resulting in the physical path being revealed, a Denial of Service situation and revealing of .jsp sourcecode.
5238686bc453229b4aceceb879e2d11abd43881bf84eafdc99cb6eaafadf1cac