CVE-2003-0411 Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
HighCVSS 7.5
EPSS 25.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle sun one application server | = 7.0 | No fix listed |
References
- 20030526 Multiple Vulnerabilities in Sun-One Application Server exploit mailing-list
- 55221 broken-link patch vendor-advisory
- 1000610 broken-link vendor-advisory
- N-103 broken-link government-resource patch third-party-advisory vendor-advisory
- sunone-jsp-source-disclosure(12093) broken-link patch vdb-entry vendor-advisory
- 7709 broken-link exploit patch third-party-advisory vdb-entry vendor-advisory
- www.spidynamics.com broken-link