CVE-2003-0411

ALTO 7.5CVE-2003-0411 · Published 30/06/2003 · updated 16/06/2026

Package	Affected versions	Patched versions
sun one application server oracle	`= 7.0`	No fix yet

Description

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

References

marc.info · Exploit
sunsolve.sun.com/pub-cgi/retrieve.pl · Broken Link
sunsolve.sun.com/search/document.do · Broken Link
ciac.org/ciac/bulletins/n-103.shtml · Broken Link
iss.net/security_center/static/12093.php · Broken Link
securityfocus.com/bid/7709 · Broken Link
spidynamics.com/sunone_alert.html · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free