CVE-2009-5046

Description

References

• ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt · Broken Link
• security-tracker.debian.org/tracker/CVE-2009-5046 · Third Party Advisory
• openwall.com/lists/oss-security/2011/01/14/2 · Mailing List

Altre vulnerabilità di jetty

• CVE-2026-10050CRITICO 9.1In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because …
• CVE-2026-8384MEDIO 5.3In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admi…
• CVE-2026-6790MEDIO 5.3In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what p…
• CVE-2026-10051ALTO 7.5In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the …
• CVE-2024-7708ALTO 7.5For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for…