CVE-2008-2403 Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .....
HighCVSS 10.0
EPSS 19.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java asp server | <= 4.0.2 | No fix listed |
| sun java asp server | = 4.0 | No fix listed |
| sun java asp server | = 4.0.1 | No fix listed |
References
- 20080603 Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities third-party-advisory
- 30523 third-party-advisory
- 238184 patch vendor-advisory
- 29538 vdb-entry
- 1020188 vdb-entry
- ADV-2008-1742 vdb-entry
- sun-jsasp-directory-traversal(42831) vdb-entry