Directory traversal in Mort Bay Jetty
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-1523US | medium5.0 | Exploit | ||
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via dir… | ||||
02
references
External citations — patches, advisories, analysis.
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388WEB
- http://jira.codehaus.org/browse/JETTY-1004WEB
- http://www.kb.cert.org/vuls/id/402580WEB
- http://www.kb.cert.org/vuls/id/CRDY-7RKQCYWEB
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.htmlWEB
- http://www.securityfocus.com/bid/34800WEB
- http://www.securityfocus.com/bid/35675WEB
- http://www.securitytracker.com/id?1022563WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan