Jetty Javascript Inclusion Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2002-1533 · ADVISORY
• web.archive.org/web/20040705203137/http://xforce.iss.net/xforce/xfdb/10219 · WEB
• web.archive.org/web/20041213153950/http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html · WEB
• web.archive.org/web/20061020173202/http://www.securityfocus.com/bid/5821 · WEB
• archives.neohapsis.com/archives/bugtraq/2002-09/0337.html · Exploit
• iss.net/security_center/static/10219.php · Vendor Advisory
• securityfocus.com/bid/5821 · Exploit

Mais vulnerabilidades de org.mortbay.jetty:jetty

• CVE-2009-4611ALTO 7.5Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta…
• CVE-2009-1523MÉDIO 5.0Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote att…
• CVE-2007-6672MÉDIO 5.0Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) …
• CVE-2007-5615MÉDIO 5.0CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP resp…
• CVE-2007-5614ALTO 7.5Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to…