Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

The version of VMware vCenter Update Manager installed on the remote Windows host is 4.0 earlier than Update 3 or 4.1 earlier than Update 1. The installed version is, therefore, potentially affected by multiple vulnerabilities in the embedded Jetty Web server :

  - A directory traversal vulnerability allows a remote,     unauthenticated attacker to obtain files from the     remote host. (CVE-2009-1523)

  - A cross-site scripting vulnerability allows a remote     attacker to execute arbitrary script code in the user's     browser. (CVE-2009-1524)

This update fixes a directory traversal bug in jetty5's HTTP server.
(CVE-2009-1523: CVSS v2 Base Score: 7.1)

A vulnerability has been identified and corrected in jetty5 :

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty before 6.1.17, and 7.0.0.M2 and earlier 7.x versions, allows remote attackers to access arbitrary files via directory traversal sequences in the URI (CVE-2009-1523).

This update fixes this vulnerability.

This bug upgrades jetty to 5.1.15 which addresses CVE-2009-1523. * Wed Feb 11 2009 Jeff Johnston <jjohnstn at redhat.com> 5.1.14-1.10 - Rename jettyc back to .jettyrc. - Resolves #485012 * Tue Feb 03 2009 Jeff Johnston <jjohnstn at redhat.com> 5.1.14-1.9 - Change %%{_sysconfdir}/init.d references to be %%{_initrddir} - Resolves #473585 * Mon Feb 02 2009 Jeff Johnston <jjohnstn at redhat.com> 5.1.14-1.8 - Fixes for unowned directories.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This build upgrades jetty to 5.1.15 which addresses CVE-2009-1523.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This build upgrades jetty to 5.1.15 which addresses CVE-2009-1523

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote instance of Mort Bay Jetty is vulnerable to a number of flaws.  First, the application is vulnerable to a cross-site-scripting flaw when displaying web directory listings.  Secondly, the application is prone to an information disclosure flaw which can be used to read files outside the web root.  Note:  in order for the second flaw to be executed, Jetty must have been configured to have DefaultServlet with support for aliases turned on.

ID	Name	Product	Family	Severity
52014	VMSA-2010-0012 : VMware vCenter Update Manager Fix for Jetty Web Server	Nessus	Windows	medium
42463	openSUSE Security Update : jetty5 (jetty5-1531)	Nessus	SuSE Local Security Checks	medium
42311	Mandriva Linux Security Advisory : jetty5 (MDVSA-2009:291)	Nessus	Mandriva Local Security Checks	medium
38919	Fedora 10 : jetty-5.1.15-3.fc10 (2009-5513)	Nessus	Fedora Local Security Checks	medium
38918	Fedora 11 : jetty-5.1.15-4.fc11 (2009-5509)	Nessus	Fedora Local Security Checks	medium
38917	Fedora 9 : jetty-5.1.15-3.fc9 (2009-5500)	Nessus	Fedora Local Security Checks	medium
5017	Mort Bay Jetty < 6.1.17 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium

Detections

Analytics

CVE-2009-1523

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium