CNCVE编号：CNCVE-20010312 CVE编号：CAN-2001-0312 安全级别：中 漏洞中文描述： Netscape企业版服务器的IBM Websphere插件允许远程攻击者通过包含主机报头的HTTP请求来阅读JSP文件的源代码，这些报头引用的主机名并不存在WebSphere的主机别名列表中，从而可以绕过WebSphere进程。 漏洞英文描述： IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere process. 漏洞参考： BUGTRAQ:20010125 Yet Another IBM WebSphere Showcode Vulerability | URL:http://archives.neohapsis.com/archives/bugtraq/2001-01/0446.html 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：权限有效性检查错误