Unscored CVE-2001-0591 EUVD-2001-0582GHSA-ppgw-xx7q-mwfh

Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read …

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.

References

2286 vdb-entry
20010212 Patch for Potential Vulnerability in the execution of JSPs outside doc_root mailing-list
oracle-handlers-directory-traversal(5986) vdb-entry