Apache Tomcat Other Vulnerability - CVE-2003-0042
Jakarta Tomcat before 3.3.1a when used with JDK 1.3.1 or earlier allows remote attackers to list directories even with an index.html or other file present or obtain unprocessed source code for a JSP file via a URL containing a null character.