CVE

Id
4310  
CVE No.
CVE-2001-1510  
Status
Candidate  
Description
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.  
Phase
Assigned (20050714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20624 4310 CVE-2001-1510 BUGTRAQ:20011128 def-2001-32  View
20625 4310 CVE-2001-1510 URL:http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2  View
20626 4310 CVE-2001-1510 BUGTRAQ:20011129 RE: def-2001-32 - Allaire JRun directory browsing vulnerability  View
20627 4310 CVE-2001-1510 URL:http://online.securityfocus.com/archive/1/243203  View
20628 4310 CVE-2001-1510 BUGTRAQ:20011203 Allaire JRun ACL bypassing/soure disclosure vulnerability  View
20629 4310 CVE-2001-1510 URL:http://www.securityfocus.com/archive/1/243636  View
20630 4310 CVE-2001-1510 ALLAIRE:MPSB01-13  View
20631 4310 CVE-2001-1510 URL:http://www.macromedia.com/v1/handlers/index.cfm?ID=22262&Method=Full  View
20632 4310 CVE-2001-1510 BID:3592  View
20633 4310 CVE-2001-1510 URL:http://www.securityfocus.com/bid/3592  View
20634 4310 CVE-2001-1510 XF:allaire-jrun-view-directory(7623)  View

Related JVN