CVE-2000-1052
MediumExploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. This can lead to disclosure of sensitive information.
Risk Assessment
An attacker can retrieve application source code, facilitating discovery of further vulnerabilities and potentially leading to system compromise. Code disclosure may breach intellectual property and data security.
Recommendation
Update Allaire JRun to a newer version or apply available patches. Restrict access to the SSIFilter servlet and review the server's security configuration.
Other vulnerabilities in Allaire JRun
See all- CVE-2000-1050Medium
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
- CVE-2000-1051Medium
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. The attack does not require authentication.
Original NVD description (English source)
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.