vulnwire
5.0med

CVE-2002-03001 exploit

gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.3%
percentile 94%
Public exploits
1
Exploit-DB

gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.

Exploit prediction (EPSS)

7.33% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-21295 GNUJSP 1.0 - File Disclosure · remote · 2002-02-19

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

References

  • securityfocus.com /bid/4125 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/8240.php · vdb-entry, x_refsource_XF, x_transferred
  • marc.info /?l=bugtraq&m=101422432123898&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • debian.org /security/2002/dsa-114 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • marc.info /?l=bugtraq&m=101415804625292&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.