CVE-2003-0411

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

Date published : 2003-06-11

http://www.securityfocus.com/bid/7709

http://marc.info/?l=bugtraq&m=105409846029475&w=2