Title: Allaire JRun 3.0 Directory Disclosure Vulnerability
Severity: HIGH
Description:
Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes, pre-compiled JSP files, server side libraries, session information and files such as web.xml and webapp.properties.
JRun contains a vulnerability which allows remote user to view the contents of the WEB-INF directory. By requesting a malformed URL comprised of an additional '/' all of the directories below the WEB-INF directory will be revealed.
Successful exploitation of this vulnerability could lead to a remote attacker gaining read access to any file within the WEB-INF directory.
While this issue was addressed in earlier patches, it is still a problem if the attacker makes a raw specially crafted HTTP GET Request through a Microsoft IIS connector using a utility such as netcat or telnet.
Affected Products:
- Macromedia JRun 3.0.0
- Macromedia JRun 3.1.0
References:
- Allaire: JRun Product Homepage
- Macromedia: Macromedia Product Security Bulletin (MPSB01-16)
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
