Unscored CVE-2008-2403 EUVD-2008-2398GHSA-p683-ffvw-hc4p

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allo…

Published Jun 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.

References

29538 vdb-entry
20080603 Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities third-party-advisory
1020188 vdb-entry
238184 vendor-advisory
ADV-2008-1742 vdb-entry
30523 third-party-advisory
sun-jsasp-directory-traversal(42831) vdb-entry