CVE-2003-0411

7.5HIGH

Key Information:

Vendor
Oracle
Status
One Application Server
Vendor
CVE Published:
30 June 2003

Summary

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

References

http://www.spidynamics.com/sunone_alert.html
x_refsource_MISC
http://www.iss.net/security_center/static/12093.php
vdb-entryx_refsource_XF
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2...
vendor-advisoryx_refsource_SUNALERT

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.