CVE-2000-0539: Undefined Security Weakness

Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet...

CVE-2000-0540: Undefined Security Weakness

JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files e.g. via viewsource.jsp or obtain configuration information...

CVE-2000-0540

JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files e.g. via viewsource.jsp or obtain configuration information...

CVE-2000-0539

Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet...

JRun viewsource.jsp Directory Traversal Arbitrary File Access

The version of JRun on the remote host has a directory traversal vulnerability in the 'source' parameter of viewsource.jsp. A remote attacker could exploit this to read arbitrary files. This could be used to read sensitive information, or information that could be used to mount further attacks...