CVE-2003-0411

Опубликовано: 30 июн. 2003

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

Ссылки

http://marc.info/?l=bugtraq&m=105409846029475&w=2
Exploit
Mailing List
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
Broken Link
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
Broken Link
http://www.ciac.org/ciac/bulletins/n-103.shtml
Broken Link
Patch
Vendor Advisory
http://www.iss.net/security_center/static/12093.php
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/7709
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.spidynamics.com/sunone_alert.html
Broken Link
http://marc.info/?l=bugtraq&m=105409846029475&w=2
Exploit
Mailing List
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
Broken Link
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
Broken Link
http://www.ciac.org/ciac/bulletins/n-103.shtml
Broken Link
Patch
Vendor Advisory
http://www.iss.net/security_center/static/12093.php
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/7709
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.spidynamics.com/sunone_alert.html
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:oracle:sun_one_application_server:7.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10053

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-178

Связанные уязвимости

GHSA-8ffw-58mq-48w9