CVEvulnerability

CVE-2003-0411

7.5 HIGH Published 2003-06-30 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-06-30
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-178

Description

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

Affected configurations

• oracle sun one application server 7.0

Weakness · CWE (1)

CWE-178 Improper Handling of Case Sensitivity weakness

Referenced by CWE · observed example (3)

CWE-178 Improper Handling of Case Sensitivity weakness
CWE-435 Improper Interaction Between Multiple Correctly-Behaving Entities weakness
CWE-439 Behavioral Change in New Version or Environment weakness

References

http://marc.info/?l=bugtraq&m=105409846029475&w=2 Exploit, Mailing List
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity Broken Link, Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 Broken Link
http://www.ciac.org/ciac/bulletins/n-103.shtml Broken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/12093.php Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/7709 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.spidynamics.com/sunone_alert.html Broken Link
http://marc.info/?l=bugtraq&m=105409846029475&w=2 Exploit, Mailing List
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity Broken Link, Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 Broken Link
http://www.ciac.org/ciac/bulletins/n-103.shtml Broken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/12093.php Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/7709 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.spidynamics.com/sunone_alert.html Broken Link