Vulnerability in Sun Java System Web Server
CVE-2000-0812
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
EPSS: 0.060 (92.6th percentile) — read the EPSS interpretation.
Affected products
- Sun Java_system_web_server — versions 1.1.2, 1.1.3, 1.1_beta
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)