CVE-2001-0926

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=100697797325013&w=2
http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=FullPatch, Vendor Advisory
http://www.securityfocus.com/bid/3589Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7622
http://marc.info/?l=bugtraq&m=100697797325013&w=2
http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=FullPatch, Vendor Advisory
http://www.securityfocus.com/bid/3589Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7622

Timeline

Published: Nov 28, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09277.5Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execu CVE-2001-09287.5Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to CVE-2001-09297.5Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T doe CVE-2001-09307.5Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.CVE-2001-09317.5Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .CVE-2001-09327.5Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code v CVE-2001-09337.5Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the dr CVE-2001-09347.5Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the f CVE-2001-09357.5Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.CVE-2001-09367.5Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run ar CVE-2001-09377.5PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid paramet CVE-2001-09386.4Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, a