CVE-2000-0540

The CVE-2000-0540 vulnerability affects Allaire/Macromedia JRun 2.3.x with its sample files. The issue enables remote disclosure of arbitrary files and configuration information, via JSP sample files (e.g., viewsource.jsp), constituting a partial confidentiality impact. Connected sources also ref...

CVE-2000-0540

JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files e.g. via viewsource.jsp or obtain configuration information...

CVE-2000-0540

JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files e.g. via viewsource.jsp or obtain configuration information...

CVE-2000-0539

Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet...

JRun viewsource.jsp Directory Traversal Arbitrary File Access

The version of JRun on the remote host has a directory traversal vulnerability in the 'source' parameter of viewsource.jsp. A remote attacker could exploit this to read arbitrary files. This could be used to read sensitive information, or information that could be used to mount further attacks...