CVE-2006-6969

Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2007-02/0070.html
http://fisheye.codehaus.org/changelog/jetty/?cs=1274
http://osvdb.org/33108
http://secunia.com/advisories/24070	Vendor Advisory
http://www.securityfocus.com/archive/1/459164/100/0/threaded
http://www.securityfocus.com/bid/22405	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0497
https://exchange.xforce.ibmcloud.com/vulnerabilities/32240

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:jetty:jetty_http_server:4.2.9:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.11:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.12:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.14:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.15:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.16:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.17:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.18:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.19:::::::*
	cpe:2.3:a:jetty:jetty_http_server:4.2.24:::::::*
	cpe:2.3:a:jetty:jetty_http_server:5.1.11:::::::*
	cpe:2.3:a:jetty:jetty_http_server:6.0.1:::::::*
	cpe:2.3:a:jetty:jetty_http_server:6.1.0_pre2:::::::*

History

No history.

Information

Published : 2007-02-07 11:28

Updated : 2024-02-28 11:01

NVD link : CVE-2006-6969

Mitre link : CVE-2006-6969

CVE.ORG link : CVE-2006-6969

JSON object : View

Products Affected

jetty

jetty_http_server

CWE

NVD-CWE-Other

{"id": "CVE-2006-6969", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-02-07T11:28:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2007-02/0070.html", "source": "cve@mitre.org"}, {"url": "http://fisheye.codehaus.org/changelog/jetty/?cs=1274", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33108", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24070", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/459164/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22405", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0497", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32240", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks."}, {"lang": "es", "value": "Jetty anterior al 4.2.27, 5.1 anterior al 5.1.12, 6.0 anterior al 6.0.2 y 6.1 anterior al 6.1.0pre3 genera identificadores de sesi\u00f3n predecibles utilizando java.util.random, lo que hace m\u00e1s f\u00e1cil para atacantes remotos el adivinar los identificadores de sesiones utilizando ataques de fuerza bruta y, posiblemente, llevar a cabo ataques de falsificaci\u00f3n de petici\u00f3n en sitios cruzados."}], "lastModified": "2018-10-16T16:29:12.960", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09FD2684-87CF-4B4D-B3D1-7DE43609D2E3"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B82462AC-665D-41C0-B198-AA52784DF4C3"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B21ED45-9C48-4547-BDCE-7EB12B03AAEE"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA62A170-2544-4D3D-8E22-21F35D2E9944"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF5CEA1C-1EC7-49D7-9485-FA8773DA2D8A"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F68F8E1-BF3C-4C99-BE93-985BB8AD51FF"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0F5EF68-A6FC-4FD7-8C36-4A8623C60622"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "858FCD10-5B40-4EA8-BA16-081EFC734695"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01A293F8-45D0-46F3-93C3-A09542628FE0"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:4.2.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "238E835C-8C44-4514-A320-E7294683C5A0"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:5.1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBDF1C6A-C804-4F51-BFF6-ECB4584E4DDB"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ED02F5B-3F98-4603-B51B-DC5F7C81291C"}, {"criteria": "cpe:2.3:a:jetty:jetty_http_server:6.1.0_pre2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F734C638-26EB-426E-8505-798F2DC526AF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}