CVE-2009-5049

Description

References

• ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt · Exploit
• security-tracker.debian.org/tracker/CVE-2009-5049 · Third Party Advisory
• openwall.com/lists/oss-security/2011/01/14/2 · Mailing List

jetty 的其他漏洞

• CVE-2009-5048中危 6.1Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
• CVE-2011-4461中危 5.3Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably,…
• CVE-2009-4612中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attacke…
• CVE-2009-4611高危 7.5Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta…
• CVE-2009-4610中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or…