CNCVE编号：CNCVE-20010326 CVE编号：CVE-2001-0326 安全级别：高 漏洞中文描述： 当服务器使用<>FilePermission配置时，Oracle 8.1.7以及 Oracle Application Server 9iAS Release 1.0.2.0.1 中的Oracle Java Virtual Machine (JVM )允许远程攻击者通过.jsp和 .sqljsp 文件扩展名来阅读任意文件。 漏洞英文描述： Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <> FilePermission. 漏洞参考： BUGTRAQ:20010212 Solution for Potential Vunerability in Granting FilePermission to Oracle Java Virtual Machine | URL:http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：配置错误