CVE-2003-0411

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

• CWE-178

• http://marc.info/?l=bugtraq&m=105409846029475&w=2Exploit, Mailing List
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3AsecurityBroken Link, Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1Broken Link
• http://www.ciac.org/ciac/bulletins/n-103.shtmlBroken Link, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/12093.phpBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/7709Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.spidynamics.com/sunone_alert.htmlBroken Link
• http://marc.info/?l=bugtraq&m=105409846029475&w=2Exploit, Mailing List
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3AsecurityBroken Link, Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1Broken Link
• http://www.ciac.org/ciac/bulletins/n-103.shtmlBroken Link, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/12093.phpBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/7709Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.spidynamics.com/sunone_alert.htmlBroken Link

Published

Jun 30, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0405Vignette StoryServer 5 and Vignette V/6 allows remote attack…
• CVE-2003-0406PalmVNC 1.40 and earlier stores passwords in plaintext in th…
• CVE-2003-0407Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 a…
• CVE-2003-0408Buffer overflow in Uptime Client (UpClient) 5.0b7, and possi…
• CVE-2003-0409Buffer overflow in BRS WebWeaver 1.04 and earlier allows rem…
• CVE-2003-0410Buffer overflow in AnalogX Proxy 4.13 allows remote attacker…
• CVE-2003-0412Sun ONE Application Server 7.0 for Windows 2000/XP does not …
• CVE-2003-0413Cross-site scripting (XSS) vulnerability in the webapps-simp…
• CVE-2003-0414The installation of Sun ONE Application Server 7.0 for Windo…
• CVE-2003-0415Remote PC Access Server 2.2 allows remote attackers to cause…
• CVE-2003-0416Cross-site scripting (XSS) vulnerability in index.cgi for Ba…
• CVE-2003-0417Directory traversal vulnerability in Son hServer 0.2 allows …