Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:02
Type | Values Removed | Values Added |
---|---|---|
References | () http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388Â - | |
References | () http://jira.codehaus.org/browse/JETTY-1004Â - | |
References | () http://secunia.com/advisories/34975Â - Vendor Advisory | |
References | () http://secunia.com/advisories/35143Â - Vendor Advisory | |
References | () http://secunia.com/advisories/35225Â - Vendor Advisory | |
References | () http://secunia.com/advisories/35776Â - Vendor Advisory | |
References | () http://secunia.com/advisories/40553Â - Vendor Advisory | |
References | () http://www.kb.cert.org/vuls/id/402580Â - US Government Resource | |
References | () http://www.kb.cert.org/vuls/id/CRDY-7RKQCYÂ - | |
References | () http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - | |
References | () http://www.securityfocus.com/bid/34800Â - | |
References | () http://www.securityfocus.com/bid/35675Â - | |
References | () http://www.securitytracker.com/id?1022563Â - | |
References | () http://www.vupen.com/english/advisories/2009/1900Â - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2010/1792Â - Vendor Advisory | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=499867Â - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html - |
Information
Published : 2009-05-05 17:30
Updated : 2024-11-21 01:02
NVD link : CVE-2009-1523
Mitre link : CVE-2009-1523
CVE.ORG link : CVE-2009-1523
JSON object : View
Products Affected
mortbay
- jetty
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')