Test ID:	10604
Category:	CGI abuses
Title:	Allaire JRun Directory Listing
Summary:	NOSUMMARY
Description:	Description: Requesting a URL with '/./' prepended to it makes the remote Allaire Server display the content of a remote directory, instead of its index.html file. An attacker may use this flaw to download 'hidden' files on your server. Solution : upgrade to JRun 3.0sp2 Risk factor : Medium
Cross-Ref:	BugTraq ID: 1830 Common Vulnerability Exposure (CVE) ID: CVE-2000-1050 Allaire Security Bulletin: ASB00-027 http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full Bugtraq: 20001023 Allaire's JRUN Unauthenticated Access to WEB-INF directory (Google Search) http://marc.info/?l=bugtraq&m=97236316510117&w=2 http://www.osvdb.org/500 XForce ISS Database: allaire-jrun-webinf-access(5407) https://exchange.xforce.ibmcloud.com/vulnerabilities/5407
Copyright	This script is Copyright (C) 2001 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.