CGI abuses : JBoss source disclosure

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 11690

Category: CGI abuses

Title: JBoss source disclosure

Summary: NOSUMMARY

Description: Description:

It is possible to make the remote web server disclose the source
code of its JSP pages by appending a NULL character to the name
of the JSP files requested (ie: foo.jsp%00).

An attacker may use this flaw to get the source code of your CGIs
and possibly obtain passwords and other relevant information about
this host.

Solution : None at this time
Risk factor : High

Cross-Ref: BugTraq ID: 7764

Copyright This script is Copyright (C) 2003 Tenable Network Security

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	11690
Category:	CGI abuses
Title:	JBoss source disclosure
Summary:	NOSUMMARY
Description:	Description: It is possible to make the remote web server disclose the source code of its JSP pages by appending a NULL character to the name of the JSP files requested (ie: foo.jsp%00). An attacker may use this flaw to get the source code of your CGIs and possibly obtain passwords and other relevant information about this host. Solution : None at this time Risk factor : High
Cross-Ref:	BugTraq ID: 7764
Copyright	This script is Copyright (C) 2003 Tenable Network Security