Vulnerability in Sybase Easerver

CVE-2002-1861

Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").

EPSS: 0.021 (80.8th percentile) — read the EPSS interpretation.

Affected products

Sybase Easerver — versions 4.0
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)