Jetty Directory Traversal Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2006-2758 · ADVISORY
• jetty-project/codehaus-jetty6 · PACKAGE
• web.archive.org/web/20200302050157/http://securitytracker.com/id · WEB
• securitytracker.com/id · Exploit

org.mortbay.jetty:jetty のその他の脆弱性

• CVE-2009-4611高 7.5Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta…
• CVE-2009-1523中 5.0Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote att…
• CVE-2007-6672中 5.0Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) …
• CVE-2007-5615中 5.0CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP resp…
• CVE-2007-5614高 7.5Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to…