CVE-2004-2478 Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca unicenter web services distributed management | <= 3.1 | No fix listed |
| ibm trading partner interchange | <= 4.2.2 | No fix listed |
| ibm trading partner interchange | = 4.2.1 | No fix listed |
| jetty http server | = 3.1.6 | No fix listed |
| jetty http server | = 3.1.7 | No fix listed |
| jetty http server | = 4.1.0 | No fix listed |
| jetty http server | = 4.1.0_rc4 | No fix listed |
| jetty http server | = 4.1.1 | No fix listed |
| jetty http server | = 4.2.4 | No fix listed |
| jetty http server | = 4.2.5 | No fix listed |
| jetty http server | = 4.2.6 | No fix listed |
| jetty http server | = 4.2.7 | No fix listed |
| jetty http server | = 4.2.9 | No fix listed |
| jetty http server | = 4.2.11 | No fix listed |
| jetty http server | = 4.2.12 | No fix listed |
| jetty http server | = 4.2.14 | No fix listed |
| jetty http server | = 4.2.15 | No fix listed |
| jetty http server | = 4.2.16 | No fix listed |
| jetty http server | = 4.2.17 | No fix listed |
| jetty http server | = 4.2.18 | No fix listed |
| jetty http server | = 4.2.19 | No fix listed |
References
- 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability mailing-list
- 12703 third-party-advisory vendor-advisory
- 22229 third-party-advisory vendor-advisory
- 1011545 vdb-entry
- 1016975 vdb-entry
- www-1.ibm.com vendor-advisory
- 10490 vdb-entry
- 20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability mailing-list
- 11330 vdb-entry
- ADV-2006-3873 vdb-entry vendor-advisory
- trading-partner-gain-access(17600) vdb-entry