CVEvulnerability

CVE-2000-0629

7.5 HIGH Published 2000-07-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-07-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.

Affected configurations

• sun java system web server 1.1.3 • sun java system web server 2.0

References