Signature Detail
Short Name |
HTTP:WEBLOGIC:WEBROOT |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
WebLogic |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Weblogic Reveals Web Root
This signature detects attempts to exploit a known vulnerability in Bea Weblogic. Version V6.1 Service Pack 2 on Windows 2000 Server is vulnerable. Attackers can append the string "%00.jsp" to a normal .html request, causing a compiler error that prints the path to the physical Web root.
Extended Description
An attacker could discover the web server's physical filesystem path,
References