CVE-2000-0629

3 documents3 sources
Severity
7.5HIGH
EPSS
1.5%
top 18.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System WEB Server
Timeline
PublishedJul 12
Latest updateApr 30

Description

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDsun/java_system_web_server1.1.3, 2.0+1

Patches

Patch: archives.neohapsis.com ↗Patch: www.sun.com ↗Patch: archives.neohapsis.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3987-59ph-j5q3: The default configuration of the Sun Java web server 2↗2022-04-30
▶
CVEList
CVE-2000-0629: The default configuration of the Sun Java web server 2↗2000-08-03
▶