PT-2000-1475 · Allaire · Jrun

Published 2000-06-22 · Updated 2017-10-10 · CVE-2000-0540

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Allaire JRun versions 2.3.x

Description The issue allows remote attackers to access arbitrary files or obtain configuration information through JSP sample files. For example, this can be achieved via the 'viewsource.jsp' file.

Recommendations For Allaire JRun versions 2.3.x, remove or restrict access to the JSP sample files to prevent exploitation. As a temporary workaround, consider restricting access to the 'viewsource.jsp' file until a more permanent solution is available.

Fix

Related Identifiers

CVE-2000-0540

Affected Products

Jrun

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0540 · Security Note
• http://securityfocus.com/bid/1386 · Vendor Advisory
• http://allaire.com/handlers/index.cfm?ID=16290&Method=Full · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4774 · Note
• http://osvdb.org/2713 · Note