Bug#528389: CVE-2009-1523: Directory traversal vulnerability in the HTTP server in Mort Bay Jetty
luciano at debian.org
Tue May 12 16:00:42 UTC 2009
the following CVE (Common Vulnerabilities & Exposures) id was
published for jetty.
| Directory traversal vulnerability in the HTTP server in Mort Bay Jetty
| before 6.1.17, and 7.0.0.M2 and earlier 7.x versions, allows remote
| attackers to access arbitrary files via directory traversal sequences
| in the URI.
If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.
For further information see:
More information about the pkg-java-maintainers