Apache Tomcat versions 4.1.0 to 4.1.31 and 5.5.0 suffer from an information disclosure vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/70828/CVE-2008-3271.txt
Source: https://packetstormsecurity.com/files/70828/CVE-2008-3271.txt.html