Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0300. PoCs published by Thomas Springer.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in GNUJSP, allowing remote attackers to disclose directory contents and read arbitrary files by appending directory/file names to a specific URL path. The issue may stem from a configuration error and can bypass .htaccess restrictions.
Description
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.
Exploits (1)
The exploit describes a directory traversal vulnerability in GNUJSP, allowing remote attackers to disclose directory contents and read arbitrary files by appending directory/file names to a specific URL path. The issue may stem from a configuration error and can bypass .htaccess restrictions.