CVE-2002-1025

N/A

Descripcion

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado10/4/2002

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

macromedia:jrun

Referencias

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html(cve@mitre.org)

http://online.securityfocus.com/archive/1/280062(cve@mitre.org)

http://www.iss.net/security_center/static/9459.php(cve@mitre.org)

http://www.macromedia.com/v1/handlers/index.cfm?ID=23164(cve@mitre.org)

http://www.osvdb.org/5028(cve@mitre.org)

http://www.securityfocus.com/bid/5134(cve@mitre.org)

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html(af854a3a-2127-422b-91ae-364da2661108)

http://online.securityfocus.com/archive/1/280062(af854a3a-2127-422b-91ae-364da2661108)

http://www.iss.net/security_center/static/9459.php(af854a3a-2127-422b-91ae-364da2661108)

http://www.macromedia.com/v1/handlers/index.cfm?ID=23164(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/5028(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/5134(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.