CVE-2002-1025 | BDVDB-2026-5342 Detail

Description#

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.macromedia.com/v1/handlers/index.cfm?ID=23164
http://www.osvdb.org/5028
http://www.securityfocus.com/bid/5134
http://online.securityfocus.com/archive/1/280062
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html
http://www.iss.net/security_center/static/9459.php

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.