PT-2003-1602 · Sun · Sun One Application Server

Name of the Vulnerable Software and Affected Versions: Sun ONE Application Server version 7.0 Description: The issue allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension. Recommendations: For Sun ONE...

security flaw

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148...

[SECURITY] [DSA 225-1] New tomcat packages fix source disclosure vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 225-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 225-1] New tomcat packages fix source disclosure vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 225-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2002 http://www.debian.org/security/faq -...

Perception LiteServe 2.0 - CGI Source Disclosure

source: https://www.securityfocus.com/bid/6188/info By constructing a malicious web request, it is possible for a remote attacker to disclose the source code of CGI scripts. Information gained through exploiting this issue may aid an attacker in launching further attacks against the target system...

Multiple Web Server Encoded Space (%20) Request ASP Source Disclosure

It appears possible to get the source code of the remote ASP scripts by appending a '%20' to the request. ASP source code usually contains sensitive information such as logins and passwords. This has been reported in Simple HTTPD shttpd, Mono XSP for ASP.NET and vWebServer. This type of request m...

Microsoft IIS / Site Server codebrws.asp Arbitrary Source Disclosure

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. %NASLMINLEVEL 70300 This script...

Deerfield Website Pro source disclosure

It's possible to obtain scripts sources with 8.3 names...

Sambar Server 5.1 - Script Source Disclosure

source: https://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %00, will successfully bypass the serverside UR...

Microsoft IIS 5.0 CodeBrws.asp Source Disclosure

-- Microsoft IIS 5.0 CodeBrws.asp Source Disclosure Summary: Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension...

Sambar Server 5.1 - Script Source Disclosure

Sambar Server 5.1 - Script Source Disclosure source: https://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %0...

Oracle 9iAS _pages Directory Compiled JSP Source Disclosure

In a default installation of Oracle 9iAS it is possible to read the source of JSP files. When a JSP is requested it is compiled 'on the fly' and the resulting HTML page is returned to the user. Oracle 9iAS uses a folder to hold the intermediate files during compilation. These files are created in...

Доступ к исходным текстам PHP в plesk (source disclosure)

Используя числовой адрес вместо виртуального имени сервера можно получить доступ к исзодным текстам...

Allaire JRun ACL bypassing/soure disclosure vulnerability

In-Reply-To: 009a01c1792a$d8a23160$0205a8c0@athlon hi, just an add on for the Jrun indexing vulnerability, the same 3f.jsp trick allows to view server scripts sources by using : GET /scripts.asp3f.jsp HTTP/1.0 and can be used to bypass IIS directories ACLs too while indexing the content and/or...

BEA WebLogic Hex Encoded Request JSP Source Disclosure

The version of BEA WebLogic installed on the remote host may be tricked into revealing the source code of JSP scripts by using simple URL encoding of characters in the filename extension. %NASLMINLEVEL 70300 This script was written by Gregory Duchemin See the Nessus Scripts License for details...

Remote vulnerabilities in OmniHTTPd

== 403 Security Lab == www.403-security.org Advisory ID: 403-05-2001 ------------------------------------------------- Advisory Name: Remote vulnerabilities in OmniHTTPd Release Date: 26.05.2001 Application: OmniHTTPd Platform: Tested on Windows2000 only Author: Astral [email protected]...

Дырки в OmniHTTPD (DoS, source disclosure)

С помощью спецлиально сконструированной URL можно получить код скриптов...

Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure

Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be...

Inktomi Search Software 3.0 - Source Disclosure

Inktomi Search Software 3.0 - Source Disclosure source: https://www.securityfocus.com/bid/2061/info A vulnerability exists in version 3.0 of Ultrseek server aka Inktomi Search. Due to a failure to properly validate user-supplied input, URLs submitted by a remote user of the form:...

RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))

Resintm serves the fastest servlets and JSP. With Java and JavaScript support, Resin gives web applications the flexibility to choose the right language for the task. Resin's leading XSL XML stylesheet language support encourages separation of content from formatting. Resin provides a fast servle...