CVE-1999-0283

Java Web Server - Unauthenticated CGI Source Code Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0283. PoCs published by Brian Krahmer.

AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Sun Microsystems' JavaWebServer 1.1Beta for Win32, allowing an attacker to retrieve the source code of .jhtml files by appending a '.' or '/' to the filename, leading to information disclosure.

Description

The Java Web Server would allow remote users to obtain the source code for CGI programs.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Brian Krahmer · textremotewindows
https://www.exploit-db.com/exploits/20375

This exploit leverages a path traversal vulnerability in Sun Microsystems' JavaWebServer 1.1Beta for Win32, allowing an attacker to retrieve the source code of .jhtml files by appending a '.' or '/' to the filename, leading to information disclosure.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Sun Microsystems JavaWebServer 1.1Beta for Win32
No auth needed
Prerequisites: Access to the target web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=88256790401004&w=2

Scores

EPSS 0.0885
EPSS Percentile 94.6%

Details

Status published
Published Jan 01, 1999
Tracked Since Feb 18, 2026