CVE-2001-0326 | BDVDB-2026-2395 Detail

Description#

Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/6438
http://www.osvdb.org/5706

Exploit#

No public exploit known

History#

Version 12001-05-07Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.