CVE-2000-0629 The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling th...
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system web server | = 1.1.3 | No fix listed |
| sun java system web server | = 2.0 | No fix listed |
References
- 20000711 Sun's Java Web Server remote command execution vulnerability exploit mailing-list patch vendor-advisory
- 1459 vdb-entry
- www.sun.com patch vendor-advisory