Allaire JRun JSP Source Disclosure Vulnerability
BID:3660
Info
Allaire JRun JSP Source Disclosure Vulnerability
| Bugtraq ID: | 3660 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2001 12:00AM |
| Updated: | Dec 06 2001 12:00AM |
| Credit: | This vulnerability was originally posted in a Macromedia Product Security Bulletin. |
| Vulnerable: |
Macromedia JRun 3.1 Macromedia JRun 3.0 |
| Not Vulnerable: | |
Discussion
Allaire JRun JSP Source Disclosure Vulnerability
Allaire JRun is a web application development suite with JSP and Java Servlets.
It is possible for a remote attacker to disclose JSP source code by making a specially crafted web request containing HTML encoded characters or a request which is appended by a null character(%00).
This issue can be exploited with the following examples:
http://target/directory/jsp/myjsp%00
http://target/directory/jsp/myjs%2570
This is also a known issue when Microsoft IIS is used as a connector for serving JSP files.
Allaire JRun is a web application development suite with JSP and Java Servlets.
It is possible for a remote attacker to disclose JSP source code by making a specially crafted web request containing HTML encoded characters or a request which is appended by a null character(%00).
This issue can be exploited with the following examples:
http://target/directory/jsp/myjsp%00
http://target/directory/jsp/myjs%2570
This is also a known issue when Microsoft IIS is used as a connector for serving JSP files.
Exploit / POC
Allaire JRun JSP Source Disclosure Vulnerability
This issue can be exploited with a web browser.
This issue can be exploited with a web browser.
Solution / Fix
Allaire JRun JSP Source Disclosure Vulnerability
Solution:
The vendor has released a patch which addresses this and other issues.
Macromedia JRun 3.0
Macromedia JRun 3.1
Solution:
The vendor has released a patch which addresses this and other issues.
Macromedia JRun 3.0
-
Macromedia JRun Win32 jr30sp2_25232.exe
http://download.allaire.com/publicdl/en/jrun/30/jr30sp2_25232.exe -
Macromedia JRun Unix jr30sp2u_25232.sh
http://download.allaire.com/publicdl/en/jrun/30/jr30sp2u_25232.sh
Macromedia JRun 3.1
-
Macromedia JRun Win32 jrun-31-win-upgrade-us_26414.exe
http://download.allaire.com/publicdl/en/jrun/31/jrun-31-win-upgrade-us _26414.exe -
Macromedia JRun Unix jrun-31-unix-upgrade-us_26414.sh
http://download.allaire.com/publicdl/en/jrun/31/jrun-31-unix-upgrade-u s_26414.sh
References
Allaire JRun JSP Source Disclosure Vulnerability
References:
References:
- Macromedia Product Security Bulletin (MPSB01-15) (Macromedia)