CVE-2001-0399

Description

Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.

Affected products

• caucho_technology / resin1.2 – 1.2
• caucho_technology / resin1.3 – 1.3

References

• MISChttp://www.securityfocus.com/bid/2533
• MAILING_LISThttp://marc.info/?l=bugtraq&m=98633597813833&w=2