Description
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.spidynamics.com/sunone_alert.html ↗
- http://www.iss.net/security_center/static/12093.php ↗
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity ↗
- http://www.ciac.org/ciac/bulletins/n-103.shtml ↗
- http://marc.info/?l=bugtraq&m=105409846029475&w=2 ↗
- http://www.securityfocus.com/bid/7709 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 ↗