CVE-2003-0411: High severity ORACLE Sun One Application Server vulnerability
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0411?
CVE-2003-0411 is considered a moderate severity vulnerability due to the potential exposure of sensitive source code.
How does CVE-2003-0411 allow attackers to exploit it?
CVE-2003-0411 allows attackers to obtain JSP source code by requesting the JSP files with an uppercase '.JSP' extension.
Which versions of Sun ONE Application Server are affected by CVE-2003-0411?
CVE-2003-0411 affects Sun ONE Application Server version 7.0 on Windows 2000 and Windows XP.
What is the potential impact of exploiting CVE-2003-0411?
Exploitation of CVE-2003-0411 may lead to unauthorized access to application source code, potentially exposing sensitive information.
How can I fix the vulnerability CVE-2003-0411?
To fix CVE-2003-0411, ensure that your server is configured to deny access to JSP files with uppercase extensions.