CVE-2002-0300

Published: May 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.

Affected (2)

Products: Gnujsp: Gnujsp

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnujsp Gnujsp	Version 1.0.0
Gnujsp Gnujsp	Version 1.0.1

References (10)

http://marc.info/?l=bugtraq&m=101415804625292&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101422432123898&w=2

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-114

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/8240.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/4125

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101415804625292&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=101422432123898&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2002/dsa-114

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/8240.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4125

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.