CVE-2001-1510: Medium severity Macromedia JRun vulnerability
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1510?
CVE-2001-1510 is considered a critical vulnerability as it allows remote attackers to read arbitrary files from the server.
How do I fix CVE-2001-1510?
To fix CVE-2001-1510, it is recommended to upgrade to a newer, patched version of Adobe JRun that addresses this vulnerability.
What systems are affected by CVE-2001-1510?
CVE-2001-1510 affects Allaire JRun versions 2.3.3, 3.0, and 3.1 running on web servers such as IIS 4.0, 5.0, Apache, and JRun web server.
Is it possible to exploit CVE-2001-1510 remotely?
Yes, CVE-2001-1510 can be exploited remotely by attackers to access sensitive files and directories on the server.
What types of files can be accessed through CVE-2001-1510?
Through CVE-2001-1510, attackers can read any arbitrary files and directories on the server that they can access based on server permissions.