Description
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
References
- 12703 third-party-advisory
- ADV-2006-3873 vdb-entry
- 11330 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21178665
- 22229 third-party-advisory
- 1016975 vdb-entry
- 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability mailing-list
- 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability mailing-list
- 1011545 vdb-entry
- trading-partner-gain-access(17600) vdb-entry
- 10490 vdb-entry