CVE-2000-0759: Jakarta Apache Tomcat Reveals Physical Paths

The vulnerability stems from Tomcat's error handling mechanism exposing physical paths in error messages. In Tomcat architecture, the DefaultServlet handles static resource requests. When a non-existent resource is requested, the servlet would throw an exception containing the filesystem path, which was then reflected in the error response. While exact code isn't available for Tomcat 3.1, this pattern matches historical descriptions of the vulnerability and aligns with common error disclosure patterns in Java servlet implementations. The confidence is high because this is the canonical component responsible for serving resources and generating 404 errors in Tomcat's architecture.