CVEvulnerability

CVE-2000-1050

5.0 MEDIUM Published 2000-12-11 Modified 2026-09-23 Official page ↗

Status: Modified
Published: 2000-12-11
Last modified: 2026-09-23
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").

Affected configurations

• macromedia jrun 3.0

Referenced by CWE · observed example (2)

CWE-41 Improper Resolution of Path Equivalence weakness
CWE-50 Path Equivalence: '//multiple/leading/slash' weakness

References

http://marc.info/?l=bugtraq&m=97236316510117&w=2 marc.info
http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full Patch, Vendor Advisory
http://www.osvdb.org/500 www.osvdb.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/5407 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=97236316510117&w=2 marc.info
http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full Patch, Vendor Advisory
http://www.osvdb.org/500 www.osvdb.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/5407 exchange.xforce.ibmcloud.com

CVE-2000-1050

Description

Affected configurations

Related

Referenced by CWE · observed example (2)

References