PT-2007-6625 · Mort Bay · Mort Bay Jetty

Tomasz Kuczynski · Publicado 2007-12-05 · Atualizado 2022-05-01 · CVE-2007-5614

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mortbay Jetty versions prior to 6.1.6rc1

Description The issue arises from improper handling of certain quote sequences in HTML cookie parameters, allowing remote attackers to hijack browser sessions.

Recommendations For versions prior to 6.1.6rc1, update to version 6.1.6rc1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-5614

GHSA-FVH3-4V5R-CVVC

Produtos afetados

Mort Bay Jetty

Referências · 13

• https://github.com/eclipse/jetty.project · Nota
• https://eclipse.org/jetty/about.php · Nota
• http://securityfocus.com/bid/26695 · Nota
• http://kb.cert.org/vuls/id/438616 · Correção
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00227.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5614 · Nota de Segurança
• http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt · Nota
• http://osvdb.org/42496 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00250.html · Aviso do Fabricante
• http://secunia.com/advisories/27925 · Nota
• https://osv.dev/vulnerability/GHSA-fvh3-4v5r-cvvc · Aviso do Fabricante
• http://secunia.com/advisories/35143 · Nota
• http://secunia.com/advisories/30941 · Nota