CVE-2000-1051
MediumExploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. The attack does not require authentication.
Risk Assessment
An attacker can access sensitive files on the server, potentially leading to data leakage. The risk is high for organizations using Allaire JRun 2.3.
Recommendation
Update Allaire JRun to a newer version or discontinue use. Implement path validation and restrict filesystem access for the application.
Other vulnerabilities in Allaire JRun
See all- CVE-2000-1050Medium
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
- CVE-2000-1052Medium
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. This can lead to disclosure of sensitive information.
Original NVD description (English source)
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.