CVE:CVE-2001-0591
CNNVD:CNNVD-200108-133
Oracle JSP 1.0.x至1.1.1版本和 Oracle 8.1.7 iAS Release 1.0.2版本存在目录遍历漏洞。远程攻击者可以借助'..' (点 点)攻击读取或执行任意.jsp文件。
solution:Upgrade oracle application_server to a higher version than 1.0.2,and avoid the version 1.0.2; Upgrade oracle jsp to a higher version than 1.1.1,and avoid the version (,1.1.1]