The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.
| Software | From | Fixed in |
|---|---|---|
| sun / java_active_server | 4.0.2 | 4.0.2.x |