CVE-2001-0179: Medium severity Macromedia JRun vulnerability

Published May 3, 2001

Updated

Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."

Affected Software

1 affected component

Macromedia JRun=3.0

Remediation

Patch Available

http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full

Event History

May 3, 2001

CVE Published

04:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0179?

CVE-2001-0179 is considered to have a moderate severity level due to its potential for information disclosure.

How do I fix CVE-2001-0179?

To fix CVE-2001-0179, you can upgrade to a patched version of Macromedia JRun that eliminates the vulnerability.

What type of attack does CVE-2001-0179 involve?

CVE-2001-0179 involves a remote information disclosure attack that allows attackers to access sensitive directory contents.

What are the consequences of CVE-2001-0179 exploitation?

Exploitation of CVE-2001-0179 can lead to unauthorized access to the WEB-INF directory and its contents, including the web.xml file.

Is Macromedia JRun 3.0 still supported regarding CVE-2001-0179?

Macromedia JRun 3.0 is no longer supported, making it critical to upgrade to a more secure and supported version to mitigate CVE-2001-0179.