CVE-2001-0926: Medium severity Macromedia JRun vulnerability
SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0926?
CVE-2001-0926 is considered a high severity vulnerability due to the potential exposure of sensitive source code.
How do I fix CVE-2001-0926?
To fix CVE-2001-0926, upgrade to a version of Allaire JRun that does not exhibit this vulnerability.
What does CVE-2001-0926 allow attackers to do?
CVE-2001-0926 allows remote attackers to access the source code for JSP files and other files in the web root.
Which versions of Allaire JRun are affected by CVE-2001-0926?
CVE-2001-0926 affects Allaire JRun versions 2.3.3, 3.0, and 3.1.
How can I determine if my system is vulnerable to CVE-2001-0926?
You can determine if your system is vulnerable to CVE-2001-0926 by checking the version of Allaire JRun you are running and testing for unauthorized access to JSP files.