CVE-2000-1051

CVE-2000-1051

Medium · published December 11, 2000

CVSS v2.0

5.0

EPSS

2%

Percentile

79.6

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.

The record

Technical detail

CVSS v2.0: 5.0 · MEDIUM
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.01917 · 79.6th percentile
Published: 2000-12-11T10:00Z

Affected products (1)

Product	Versions	Fixed in
macromedia/jrun	all versions	—

References (6)

http://marc.info/?l=bugtraq&m=97236692714978&w=2 · [email protected]http://www.allaire.com/handlers/index.cfm?ID=17968&Method=Full · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5405 · [email protected]http://marc.info/?l=bugtraq&m=97236692714978&w=2 · af854a3a-2127-422b-91ae-364da2661108 http://www.allaire.com/handlers/index.cfm?ID=17968&Method=Full · af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/5405 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

22 JAN 05:00Z
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet
cvelistv5