CVE-2003-0411

High

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase…

mitre·CWE-178·Published 2003-06-11

CVSS

7.5

EPSS

0.25

KEV

Exploits

cve.orgen

196 chars

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

NVDen

196 chars

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

NVDes

212 chars

Sun ONE Application Server 7.0 para Windows 2000/XP permite atacantes remotos obtener código fuente JSP mediante una petición que usa la extensíon ".JSP", con letras mayúsculas, en lugar de ".jsp", en minúsculas.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N