CVE:CVE-2001-0326
CNNVD:CNNVD-200105-073
Oracle 8.1.7和Oracle Application Server 9iAS 1.0.2.0.1版本中Oracle Java Virtual Machine (JVM )存在漏洞。远程攻击者当服务器被配置使用<<ALL FILES>> FilePermission时借助.jsp和.sqljsp文件扩展名读取任意文件。
solution:Upgrade oracle application_server to a higher version than release_1.0.2.0.1,and avoid the version release_1.0.2.0.1; Upgrade oracle oracle8i to a higher version than 8.1.7_r3,and avoid the version 8.1.7_r3