NetSight
IP …
critical10.0

CVE-2008-2403

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers t…

Impact

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.

Affected products

VendorProductAffected versions
SunJava Asp Server
through 4.0.2
Versions 4.0, 4.0.1

Weakness classification

CWE-22

References