Published: 08/01/2008 Updated: 30/10/2012

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Mortbay Jetty 6.1.5 and 6.1.6 allows remote malicious users to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mortbay jetty jetty 6.1.6
mortbay jetty jetty 6.1.5

Debian Bug report logs - #462793 jetty5: CVE-2007-6672 unauthorized disclosure of information Package: jetty; Maintainer for jetty is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Nico Golde <nion@debianorg> Date: Sun, 27 Jan 2008 15:27:01 UTC Severity: grave Tags: security D ...

CWE-22 http://jira.codehaus.org/browse/JETTY-386#action_117699 http://jira.codehaus.org/browse/JETTY/fixforversion/13950 http://www.kb.cert.org/vuls/id/553235 http://www.securityfocus.com/bid/27117 http://secunia.com/advisories/28322 http://www.igniterealtime.org/community/message/163752 http://secunia.com/advisories/28547 http://www.vupen.com/english/advisories/2008/0079 http://osvdb.org/39855 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=462793 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/553235

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6672

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect