CVE-2009-3579

概要

参考情報

• coresecurity.com/content/jetty-persistent-xss · Exploit
• securityfocus.com/archive/1/507013/100/0/threaded
• ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt

jetty のその他の脆弱性

• CVE-2009-5049中 6.1WebApp JSP Snoop page XSS in jetty though 6.1.21.
• CVE-2009-5048中 6.1Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
• CVE-2011-4461中 5.3Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably,…
• CVE-2009-4612中 4.3Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attacke…
• CVE-2009-4611高 7.5Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta…