GNUJSP File Disclosure Vulnerability
BID:4125
Info
GNUJSP File Disclosure Vulnerability
| Bugtraq ID: | 4125 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 19 2002 12:00AM |
| Updated: | Feb 19 2002 12:00AM |
| Credit: | This vulnerability was submitted to BugTraq on February 19th, 2002 by Thomas Springer <[email protected]>. |
| Vulnerable: |
GNUJSP GNUJSP 1.0.1 GNUJSP GNUJSP 1.0 .0 |
| Not Vulnerable: | |
Discussion
GNUJSP File Disclosure Vulnerability
GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems.
It has been reported that a remote attacker may disclose the contents of directories via a specially crafted web request. This may be exploited to list directories, read the contents of arbitrary web-readable files, and disclose script source code. The attacker simply appends the name of the directory and/or file to be disclosed to a web request for /servlets/gnujsp/.
It should be noted that this may allow an attacker to circumvent .htaccess files.
This issue may be the result of a configuration error.
GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems.
It has been reported that a remote attacker may disclose the contents of directories via a specially crafted web request. This may be exploited to list directories, read the contents of arbitrary web-readable files, and disclose script source code. The attacker simply appends the name of the directory and/or file to be disclosed to a web request for /servlets/gnujsp/.
It should be noted that this may allow an attacker to circumvent .htaccess files.
This issue may be the result of a configuration error.
Exploit / POC
GNUJSP File Disclosure Vulnerability
The following example was submitted:
http://site/servlets/gnujsp/[dirname]/[file]
The following example was submitted:
http://site/servlets/gnujsp/[dirname]/[file]