Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
Advisories
Source ID Title
EUVD EUVD EUVD-2001-0326 Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-08T04:14:07.386Z

Reserved: 2001-04-04T00:00:00

Link: CVE-2001-0326

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2001-05-03T04:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2001-0326

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.