PT-2001-1536 · Bajie · Bajie Http Jserver

Published 2001-04-04 · Updated 2008-09-05 · CVE-2001-0308

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bajie HTTP JServer versions 0.78 and possibly other versions before 0.80

Description The issue allows remote attackers to execute arbitrary commands by calling the UploadServlet to upload a program, then using a modified approach to access the file created for the program.

Recommendations For versions 0.78 and possibly other versions before 0.80, consider disabling the UploadServlet until a patch is available to prevent remote attackers from executing arbitrary commands.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2001-0308

Affected Products

Bajie Http Jserver

References · 5

• 🔥 http://securityfocus.com/bid/2388 · Exploit
• 🔥 https://exploit-db.com/exploits/20638 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0308 · Security Note
• http://geocities.com/gzhangx/websrv/docs/security.html · Note