CVE-2002-1025

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.

Affected (3)

Products: Macromedia: Jrun

Macromedia

1 product

Jrun

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Macromedia Jrun	Version 3.0
Macromedia Jrun	Version 3.1
Macromedia Jrun	Version 4.0

References (12)

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/280062

Source: cve@mitre.org

http://www.iss.net/security_center/static/9459.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.macromedia.com/v1/handlers/index.cfm?ID=23164

Source: cve@mitre.org

http://www.osvdb.org/5028

Source: cve@mitre.org

http://www.securityfocus.com/bid/5134

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html