Published: 05/12/2007 Updated: 10/06/2009

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty prior to 6.1.6rc1 allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters and cookies.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mortbay jetty jetty 4.0
mortbay jetty jetty 4.1
mortbay jetty jetty 1.0
mortbay jetty jetty 5.1
mortbay jetty jetty 6
mortbay jetty jetty 4.2
mortbay jetty jetty 5
mortbay jetty jetty 2.4
mortbay jetty jetty 3.0
mortbay jetty jetty 3.1
mortbay jetty jetty 6.1

Debian Bug report logs - #528389 CVE-2009-1523: Directory traversal vulnerability in the HTTP server in Mort Bay Jetty Package: jetty; Maintainer for jetty is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Luciano Bello <luciano@debianorg> Date: Tue, 12 May 2009 16:09:04 UTC Sev ...

Debian Bug report logs - #527571 CVE-2009-1524: Cross-site scripting (XSS) vulnerability in Mort Bay Jetty Package: jetty; Maintainer for jetty is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Fri, 8 May 2009 08:42:00 UTC Severity: ...

Debian Bug report logs - #454529 CVE-2007-5615: CRLF injection vulnerability Package: jetty; Maintainer for jetty is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Wed, 5 Dec 2007 22:42:01 UTC Severity: important Tags: security ...

CWE-79 http://jira.codehaus.org/browse/JETTY-452 http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt http://www.kb.cert.org/vuls/id/237888 http://www.securityfocus.com/bid/26697 http://secunia.com/advisories/27925 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html http://secunia.com/advisories/30941 http://osvdb.org/42497 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://secunia.com/advisories/35143 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528389 https://www.kb.cert.org/vuls/id/237888

CVE-2007-5613

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect