CVE-2001-1510
First published: Mon Dec 31 2001(Updated: )
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe JRun | =3.1 | |
| Adobe JRun | =2.3.3 | |
| Adobe JRun | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2
- http://online.securityfocus.com/archive/1/243203
- http://www.securityfocus.com/archive/1/243636
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22262&Method=Full
- http://www.securityfocus.com/bid/3592
- http://www.iss.net/security_center/static/7623.php
Frequently Asked Questions
What is the severity of CVE-2001-1510?
CVE-2001-1510 is considered a critical vulnerability as it allows remote attackers to read arbitrary files from the server.
How do I fix CVE-2001-1510?
To fix CVE-2001-1510, it is recommended to upgrade to a newer, patched version of Adobe JRun that addresses this vulnerability.
What systems are affected by CVE-2001-1510?
CVE-2001-1510 affects Allaire JRun versions 2.3.3, 3.0, and 3.1 running on web servers such as IIS 4.0, 5.0, Apache, and JRun web server.
Is it possible to exploit CVE-2001-1510 remotely?
Yes, CVE-2001-1510 can be exploited remotely by attackers to access sensitive files and directories on the server.
What types of files can be accessed through CVE-2001-1510?
Through CVE-2001-1510, attackers can read any arbitrary files and directories on the server that they can access based on server permissions.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/macromedia
- canonical/adobe jrun
- version/adobe jrun/3.1
- version/adobe jrun/2.3.3
- version/adobe jrun/3.0