CVE-2000-0812

published 2000-11-14

CVE-2000-0812: The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sun	java_system_web_server	—	—
sun	java_system_web_server	—	—
sun	java_system_web_server	—	—
sun	java_system_web_server	—	—