CNCVE编号：CNCVE-20001114 CVE编号：CAN-2000-1114 安全级别：低 漏洞中文描述： Unify ServletExec AS v3.0C允许远程攻击者通过一个以“.”或“+”或“%20”结尾的HTTP请求来阅读JSP页的源代码。 漏洞英文描述： Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20". 漏洞参考： BUGTRAQ:20001121 Disclosure of JSP source code with ServletExec AS v3.0c + web ins tance | URL:http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html | BID:1970 | URL:http://www.securityfocus.com/bid/1970 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：输入有效性检查错误