CVE-2000-0498

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
References
Link Resource
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html Broken Link Vendor Advisory
http://www.securityfocus.com/bid/1328 Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/4649 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:unify:ewave_servletexec:-:*:*:*:*:*:*:*

History

26 Jan 2024, 17:43

Type Values Removed Values Added
CPE cpe:2.3:a:unify:ewave_servletexec:3.0:*:*:*:*:*:*:* cpe:2.3:a:unify:ewave_servletexec:-:*:*:*:*:*:*:*
References () http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html - Vendor Advisory () http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html - Broken Link, Vendor Advisory
References () http://www.securityfocus.com/bid/1328 - () http://www.securityfocus.com/bid/1328 - Broken Link, Third Party Advisory, VDB Entry
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/4649 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/4649 - Third Party Advisory, VDB Entry
CVSS v2 : 5.0
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE NVD-CWE-Other CWE-178

Information

Published : 2000-06-08 04:00

Updated : 2024-01-26 17:43


NVD link : CVE-2000-0498

Mitre link : CVE-2000-0498

CVE.ORG link : CVE-2000-0498


JSON object : View

Products Affected

unify

  • ewave_servletexec
CWE
CWE-178

Improper Handling of Case Sensitivity