Test ID:	1.3.6.1.4.1.25623.1.0.51673
Category:	CGI abuses
Title:	Blazix jsp source disclosure
Summary:	NOSUMMARY
Description:	Description: The Blazix Java Web server version 1.2 and earlier allows remote users to disclose the contents of .jsp files by appending a backslash or plug sign to the jsp file's URL. ***WARNING: We could not exploit this vulnerability, only determined that you are running a Blazix web server. Please ensure that your software is upgraded to version 1.2.1 or later. Solution: Upgrade to version 1.2.1 or later. Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 5566 Common Vulnerability Exposure (CVE) ID: CVE-2002-1451 http://www.securityfocus.com/bid/5566 BugTraq ID: 5567 http://www.securityfocus.com/bid/5567 Bugtraq: 20020824 Blazix 1.2 jsp view and free protected folder access (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html http://www.iss.net/security_center/static/9952.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.