Description
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
References
- 00197 vendor-advisory
- sunjava-webadmin-bbs(5135) vdb-entry
- 1600 vdb-entry
- http://www.securityfocus.com/templates/advisory.html?id=2542