PT-2007-6626 · Mort Bay · Mort Bay Jetty

Tomasz Kuczynski · Publicado 2007-12-05 · Atualizado 2022-05-01 · CVE-2007-5615

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mortbay Jetty versions prior to 6.1.6rc0

Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.

Recommendations For Mortbay Jetty versions prior to 6.1.6rc0, update to version 6.1.6rc0 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-5615

GHSA-966R-962G-2JQ5

Produtos afetados

Mort Bay Jetty

Referências · 15

• https://github.com/jetty-project/codehaus-jetty6/commit/0d2592ea3183914163d0921e4855bd3e18582a05 · Nota
• https://web.archive.org/web/20150112202621/http://securityfocus.com/bid/26696 · Nota
• http://osvdb.org/42495 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5615 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00227.html · Aviso do Fabricante
• http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt · Nota
• http://secunia.com/advisories/30941 · Nota
• https://web.archive.org/web/20071007232422/http://svn.codehaus.org:80/jetty/jetty/trunk/VERSION.txt · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00250.html · Aviso do Fabricante
• http://secunia.com/advisories/27925 · Nota
• https://osv.dev/vulnerability/GHSA-966r-962g-2jq5 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/212984 · Nota
• http://secunia.com/advisories/35143 · Nota
• http://securityfocus.com/bid/26696 · Nota