Jetty Directory Traversal Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2006-2758 · ADVISORY
• jetty-project/codehaus-jetty6 · PACKAGE
• web.archive.org/web/20200302050157/http://securitytracker.com/id · WEB
• securitytracker.com/id · Exploit

Mais vulnerabilidades de org.mortbay.jetty:jetty

• CVE-2009-4611ALTO 7.5Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta…
• CVE-2009-1523MÉDIO 5.0Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote att…
• CVE-2007-6672MÉDIO 5.0Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) …
• CVE-2007-5615MÉDIO 5.0CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP resp…
• CVE-2007-5614ALTO 7.5Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to…