CVE-2000-0498: High severity Unify eWave ServletExec vulnerability

Published Jun 8, 2000

Updated

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

Affected Software

2 affected components

Unify eWave ServletExec=3.0

Unify eWave ServletExec

Event History

Jun 8, 2000

CVE Published

04:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0498?

CVE-2000-0498 is considered a medium severity vulnerability due to its potential for exploitation by remote attackers.

How do I fix CVE-2000-0498?

To fix CVE-2000-0498, configure the web server to restrict access to JSP source files and ensure proper server hardening.

Who is affected by CVE-2000-0498?

CVE-2000-0498 affects users of Unify eWave ServletExec version 3.0 and potentially other versions of the software.

What kind of attack can be executed using CVE-2000-0498?

An attacker can exploit CVE-2000-0498 to view the source code of JSP programs, leading to potential information disclosure.

Is there a patch available for CVE-2000-0498?

There is no specific patch for CVE-2000-0498; users should implement security best practices to mitigate the vulnerability.