CVE-2002-0300

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-05-31 · updated 2026-06-16

Description

gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.

Affected products

Gnujsp: 1.0.0, 1.0.1

References

http://marc.info/?l=bugtraq&m=101415804625292&w=2
http://marc.info/?l=bugtraq&m=101422432123898&w=2
http://www.debian.org/security/2002/dsa-114
http://www.iss.net/security_center/static/8240.php
http://www.securityfocus.com/bid/4125
http://marc.info/?l=bugtraq&m=101415804625292&w=2
http://marc.info/?l=bugtraq&m=101422432123898&w=2
http://www.debian.org/security/2002/dsa-114
http://www.iss.net/security_center/static/8240.php
http://www.securityfocus.com/bid/4125

Get alerted when CVE-2002-0300 or the next vulnerability affects your stack