CVE-2002-2186

Description

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.

Affected products

• macromedia / jrun3.0 – 3.0
• macromedia / jrun3.1 – 3.1
• macromedia / jrun4.0 – 4.0

References

• MISChttp://www.macromedia.com/v1/Handlers/index.cfm?ID=23500
• MISChttp://www.iss.net/security_center/static/10570.php
• MISChttp://www.securityfocus.com/bid/6126