← Database

CVE-2003-0411

HIGH CVSS: 7.5 Published: 2003-06-30 Modified: 2026-06-16

Description

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

Affected Platforms

Microsoft Windows 2000Oracle Sun One Application ServerMicrosoft Windows Xp

Weakness Type

CWE-178

References