Dear all,
Altering ${catalina_home}/lib/org/apache/catalina/util/ServerInfo.properties
because of information disclosure concerns (TC version number)
in apache-tomcat-6.0.37, apache-tomcat-7.0.40, apache-tomcat-7.0.42 and Apache
Tomcat/8.0.0-RC1 as mentioned in the documentation
(http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html,
http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html)
leads to ClassNotFoundException and Tomcat cannot be started.
The older versions of Tomcat 6 and Tomcat 7 are not affected. Is this now
intended or did I miss something?
Error message (Tomcat 8):
java.lang.ClassNotFoundException: org.apache.catalina.startup.Catalina
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at org.apache.catalina.startup.Bootstrap.init(Bootstrap.java:271)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:461)
Tomcat:
apache-tomcat-6.0.37
apache-tomcat-7.0.40
apache-tomcat-7.0.42
Tomcat/8.0.0-RC1
JDK:
Oracle jdk1.7.0_25
OS:
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 1
Thank you very much!