Allaire JRun JSP Source Disclosure Vulnerability

Bugtraq ID:	3664
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 09 2001 12:00AM
Updated:	Aug 09 2001 12:00AM
Credit:	Published in Macromedia Product Security Bulletin (MPSB01-09) on August 9, 2001.
Vulnerable:	Macromedia JRun 3.1 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Redhat Linux 6.1 sparc - Redhat Linux 6.1 i386 - Redhat Linux 6.1 alpha - Redhat Linux 6.0 sparc - Redhat Linux 6.0 alpha - Redhat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 8_sparc - Sun Solaris 7.0 Macromedia JRun 3.0 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Redhat Linux 6.1 sparc - Redhat Linux 6.1 i386 - Redhat Linux 6.1 alpha - Redhat Linux 6.0 sparc - Redhat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 7.0 - Sun Solaris 2.6
Not Vulnerable:

Allaire JRun JSP Source Disclosure Vulnerability

Allaire JRun is a web application development suite with JSP and Java Servlets.

A vulnerability exists in JRun which could enable a remote user to gain access to the source code of a known JSP file.

This is achieved when submitting a URL requesting a JSP file appended with '::$DATA'.

Allaire JRun JSP Source Disclosure Vulnerability

This can be exploited in a web browser.

Allaire JRun JSP Source Disclosure Vulnerability

Solution:
Macromedia has released the following patches which rectify this issue:


Macromedia JRun 3.0

• Macromedia JRun Win32 jr30sp2_25232.exe
  http://download.allaire.com/publicdl/en/jrun/30/jr30sp2_25232.exe


• Macromedia JRun Unix jr30sp2u_25232.sh
  http://download.allaire.com/publicdl/en/jrun/30/jr30sp2u_25232.sh

Macromedia JRun 3.1

• Macromedia JRun Win32 jrun-31-win-upgrade-us_26414.exe
  http://download.allaire.com/publicdl/en/jrun/31/jrun-31-win-upgrade-us _26414.exe


• Macromedia JRun Unix jrun-31-unix-upgrade-us_26414.sh
  http://download.allaire.com/publicdl/en/jrun/31/jrun-31-unix-upgrade-u s_26414.sh

Allaire JRun JSP Source Disclosure Vulnerability

References: