CVE-2000-0629 | BDVDB-2026-1366 Detail

Description#

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/1459
http://archives.neohapsis.com/archives/bugtraq/2000-07/0163.html
http://www.sun.com/software/jwebserver/faq/jwsca-2000-02.html

Exploit#

No public exploit known

History#

Version 12000-08-03Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.