EIP-2026-102451

This is a writeup describing a directory traversal vulnerability in Oracle on Windows 2000, allowing remote users to read files outside the webroot via crafted requests to a.jsp or bb.sqljsp. The exploit results in files being copied to the _pages directory with a .java extension.