CVE Vulnerabilities

CVE-2004-2478

Published: Dec 31, 2004 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Affected Software

Name Vendor Start Version End Version
Unicenter_web_services_distributed_management Ca * 3.1
Trading_partner_interchange Ibm 4.2.1 4.2.1
Trading_partner_interchange Ibm * 4.2.2
Jetty_http_server Jetty 3.1.6 3.1.6
Jetty_http_server Jetty 3.1.7 3.1.7
Jetty_http_server Jetty 4.1.0 4.1.0
Jetty_http_server Jetty 4.1.0_rc4 4.1.0_rc4
Jetty_http_server Jetty 4.1.1 4.1.1
Jetty_http_server Jetty 4.2.4 4.2.4
Jetty_http_server Jetty 4.2.5 4.2.5
Jetty_http_server Jetty 4.2.6 4.2.6
Jetty_http_server Jetty 4.2.7 4.2.7
Jetty_http_server Jetty 4.2.9 4.2.9
Jetty_http_server Jetty 4.2.11 4.2.11
Jetty_http_server Jetty 4.2.12 4.2.12
Jetty_http_server Jetty 4.2.14 4.2.14
Jetty_http_server Jetty 4.2.15 4.2.15
Jetty_http_server Jetty 4.2.16 4.2.16
Jetty_http_server Jetty 4.2.17 4.2.17
Jetty_http_server Jetty 4.2.18 4.2.18
Jetty_http_server Jetty 4.2.19 4.2.19

References