Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1025
jrun
remote attackers
jsp
http
security vulnerability
7.6 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
79.6%
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| macromedia:jrun | macromedia jrun | eq | 3.1 |
| macromedia:jrun | macromedia jrun | eq | 3.0 |
| macromedia:jrun | macromedia jrun | eq | 4.0 |
7.6 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
79.6%