Lucene search
HistoryNov 22, 2005 - 11:03 a.m.
CVE-2005-3747
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.4%
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (“%5C”) characters. NOTE: this might be the same issue as CVE-2006-2758.
Affected configurations
Node
mortbayjettyRange≤5.1.5
ORmortbayjettyMatch1.0
ORmortbayjettyMatch1.0.1
ORmortbayjettyMatch1.1
ORmortbayjettyMatch1.1.1
ORmortbayjettyMatch1.2.0
ORmortbayjettyMatch1.3.0
ORmortbayjettyMatch1.3.1
ORmortbayjettyMatch1.3.2
ORmortbayjettyMatch1.3.3
ORmortbayjettyMatch1.3.4
ORmortbayjettyMatch1.3.5
ORmortbayjettyMatch2.0alpha1
ORmortbayjettyMatch2.0alpha2
ORmortbayjettyMatch2.0beta1
ORmortbayjettyMatch2.0beta2
ORmortbayjettyMatch2.0.0
ORmortbayjettyMatch2.0.1
ORmortbayjettyMatch2.0.2
ORmortbayjettyMatch2.0.3
ORmortbayjettyMatch2.0.4
ORmortbayjettyMatch2.0.5
ORmortbayjettyMatch2.1.0
ORmortbayjettyMatch2.1.1
ORmortbayjettyMatch2.1.2
ORmortbayjettyMatch2.1.3
ORmortbayjettyMatch2.1.4
ORmortbayjettyMatch2.1.5
ORmortbayjettyMatch2.1.6
ORmortbayjettyMatch2.1.7
ORmortbayjettyMatch2.1.b0
ORmortbayjettyMatch2.1.b1
ORmortbayjettyMatch2.2alpha0
ORmortbayjettyMatch2.2alpha1
ORmortbayjettyMatch2.2beta0
ORmortbayjettyMatch2.2beta1
ORmortbayjettyMatch2.2beta2
ORmortbayjettyMatch2.2beta3
ORmortbayjettyMatch2.2beta4
ORmortbayjettyMatch2.2.0
ORmortbayjettyMatch2.2.1
ORmortbayjettyMatch2.2.2
ORmortbayjettyMatch2.2.3
ORmortbayjettyMatch2.2.4
ORmortbayjettyMatch2.2.5
ORmortbayjettyMatch2.2.6
ORmortbayjettyMatch2.2.7
ORmortbayjettyMatch2.2.8
ORmortbayjettyMatch2.3.0
ORmortbayjettyMatch2.3.0a
ORmortbayjettyMatch2.3.1
ORmortbayjettyMatch2.3.2
ORmortbayjettyMatch2.3.3
ORmortbayjettyMatch2.3.4
ORmortbayjettyMatch2.3.5
ORmortbayjettyMatch2.4.0
ORmortbayjettyMatch2.4.1
ORmortbayjettyMatch2.4.2
ORmortbayjettyMatch2.4.3
ORmortbayjettyMatch2.4.4
ORmortbayjettyMatch2.4.5
ORmortbayjettyMatch2.4.6
ORmortbayjettyMatch2.4.7
ORmortbayjettyMatch2.4.8
ORmortbayjettyMatch2.4.9
ORmortbayjettyMatch3.0
ORmortbayjettyMatch3.0.0
ORmortbayjettyMatch3.0.0rc1
ORmortbayjettyMatch3.0.0rc2
ORmortbayjettyMatch3.0.0rc3
ORmortbayjettyMatch3.0.0rc4
ORmortbayjettyMatch3.0.0rc5
ORmortbayjettyMatch3.0.0rc6
ORmortbayjettyMatch3.0.0rc7
ORmortbayjettyMatch3.0.0rc8
ORmortbayjettyMatch3.0.1
ORmortbayjettyMatch3.0.2
ORmortbayjettyMatch3.0.3
ORmortbayjettyMatch3.0.4
ORmortbayjettyMatch3.0.5
ORmortbayjettyMatch3.0.6
ORmortbayjettyMatch3.0.a0
ORmortbayjettyMatch3.0.a1
ORmortbayjettyMatch3.0.a2
ORmortbayjettyMatch3.0.a3
ORmortbayjettyMatch3.0.a4
ORmortbayjettyMatch3.0.a5
ORmortbayjettyMatch3.0.a6
ORmortbayjettyMatch3.0.a7
ORmortbayjettyMatch3.0.a8
ORmortbayjettyMatch3.0.a9
ORmortbayjettyMatch3.0.a90
ORmortbayjettyMatch3.0.a91
ORmortbayjettyMatch3.0.a92
ORmortbayjettyMatch3.0.a93
ORmortbayjettyMatch3.0.a94
ORmortbayjettyMatch3.0.a95
ORmortbayjettyMatch3.0.a96
ORmortbayjettyMatch3.0.a97
ORmortbayjettyMatch3.0.a98
ORmortbayjettyMatch3.0.a99
ORmortbayjettyMatch3.0.b01
ORmortbayjettyMatch3.0.b02
ORmortbayjettyMatch3.0.b03
ORmortbayjettyMatch3.0.b04
ORmortbayjettyMatch3.0.b05
ORmortbayjettyMatch3.1rc0
ORmortbayjettyMatch3.1rc1
ORmortbayjettyMatch3.1rc2
ORmortbayjettyMatch3.1rc3
ORmortbayjettyMatch3.1rc4
ORmortbayjettyMatch3.1rc5
ORmortbayjettyMatch3.1rc6
ORmortbayjettyMatch3.1rc7
ORmortbayjettyMatch3.1rc8
ORmortbayjettyMatch3.1rc9
ORmortbayjettyMatch3.1.0
ORmortbayjettyMatch3.1.1
ORmortbayjettyMatch3.1.2
ORmortbayjettyMatch3.1.3
ORmortbayjettyMatch3.1.4
ORmortbayjettyMatch3.1.5
ORmortbayjettyMatch3.1.6
ORmortbayjettyMatch3.1.7
ORmortbayjettyMatch3.1.8
ORmortbayjettyMatch3.1.9
ORmortbayjettyMatch4.0rc1
ORmortbayjettyMatch4.0rc2
ORmortbayjettyMatch4.0rc3
ORmortbayjettyMatch4.0.0
ORmortbayjettyMatch4.0.1
ORmortbayjettyMatch4.0.1rc0
ORmortbayjettyMatch4.0.1rc1
ORmortbayjettyMatch4.0.1rc2
ORmortbayjettyMatch4.0.2
ORmortbayjettyMatch4.0.3
ORmortbayjettyMatch4.0.4
ORmortbayjettyMatch4.0.5
ORmortbayjettyMatch4.0.6
ORmortbayjettyMatch4.0.b0
ORmortbayjettyMatch4.0.b1
ORmortbayjettyMatch4.0.b2
ORmortbayjettyMatch4.0.d0
ORmortbayjettyMatch4.0.d1
ORmortbayjettyMatch4.0.d2
ORmortbayjettyMatch4.0.d3
ORmortbayjettyMatch4.0.d4
ORmortbayjettyMatch4.1.0
ORmortbayjettyMatch4.1.0rc0
ORmortbayjettyMatch4.1.0rc1
ORmortbayjettyMatch4.1.0rc2
ORmortbayjettyMatch4.1.0rc3
ORmortbayjettyMatch4.1.0rc4
ORmortbayjettyMatch4.1.0rc5
ORmortbayjettyMatch4.1.0rc6
ORmortbayjettyMatch4.1.1
ORmortbayjettyMatch4.1.2
ORmortbayjettyMatch4.1.3
ORmortbayjettyMatch4.1.4
ORmortbayjettyMatch4.1.b0
ORmortbayjettyMatch4.1.b1
ORmortbayjettyMatch4.1.d0
ORmortbayjettyMatch4.1.d1
ORmortbayjettyMatch4.1.d2
ORmortbayjettyMatch4.2
ORmortbayjettyMatch4.2.0
ORmortbayjettyMatch4.2.0beta0
ORmortbayjettyMatch4.2.0rc0
ORmortbayjettyMatch4.2.0rc1
ORmortbayjettyMatch4.2.1
ORmortbayjettyMatch4.2.2
ORmortbayjettyMatch4.2.3
ORmortbayjettyMatch4.2.4
ORmortbayjettyMatch4.2.4rc0
ORmortbayjettyMatch4.2.5
ORmortbayjettyMatch4.2.6
ORmortbayjettyMatch4.2.7
ORmortbayjettyMatch4.2.8_01
ORmortbayjettyMatch4.2.9
ORmortbayjettyMatch4.2.9rc1
ORmortbayjettyMatch4.2.9rc2
ORmortbayjettyMatch4.2.10
ORmortbayjettyMatch4.2.10pre0
ORmortbayjettyMatch4.2.10pre1
ORmortbayjettyMatch4.2.10pre2
ORmortbayjettyMatch4.2.11
ORmortbayjettyMatch4.2.12
ORmortbayjettyMatch4.2.14
ORmortbayjettyMatch4.2.14rc0
ORmortbayjettyMatch4.2.14rc1
ORmortbayjettyMatch4.2.15
ORmortbayjettyMatch4.2.15rc0
ORmortbayjettyMatch4.2.16
ORmortbayjettyMatch4.2.17
ORmortbayjettyMatch4.2.18
ORmortbayjettyMatch4.2.19
ORmortbayjettyMatch4.2.20
ORmortbayjettyMatch4.2.20rc0
ORmortbayjettyMatch4.2.21
ORmortbayjettyMatch4.2.22
ORmortbayjettyMatch4.2.23
ORmortbayjettyMatch4.2.23rc0
ORmortbayjettyMatch4.2.24
ORmortbayjettyMatch4.2.24rc0
ORmortbayjettyMatch4.2.24rc1
ORmortbayjettyMatch4.2.25
ORmortbayjettyMatch4.2.26
ORmortbayjettyMatch4.2.27
ORmortbayjettyMatch5.0alpha0
ORmortbayjettyMatch5.0alpha1
ORmortbayjettyMatch5.0alpha2
ORmortbayjettyMatch5.0alpha3
ORmortbayjettyMatch5.0beta0
ORmortbayjettyMatch5.0beta1
ORmortbayjettyMatch5.0beta2
ORmortbayjettyMatch5.0rc1
ORmortbayjettyMatch5.0rc2
ORmortbayjettyMatch5.0rc3
ORmortbayjettyMatch5.0rc4
ORmortbayjettyMatch5.0.0
ORmortbayjettyMatch5.0.0rc0
ORmortbayjettyMatch5.1
ORmortbayjettyMatch5.1.0
ORmortbayjettyMatch5.1.1
ORmortbayjettyMatch5.1.1rc0
ORmortbayjettyMatch5.1.1rc1
ORmortbayjettyMatch5.1.2
ORmortbayjettyMatch5.1.2pre0
ORmortbayjettyMatch5.1.3
ORmortbayjettyMatch5.1.3rc0
ORmortbayjettyMatch5.1.3rc1
ORmortbayjettyMatch5.1.3rc2
ORmortbayjettyMatch5.1.3rc3
ORmortbayjettyMatch5.1.3rc4
ORmortbayjettyMatch5.1.4
ORmortbayjettyMatch5.1.4rc0
ORmortbayjettyMatch5.1.5rc0
ORmortbayjettyMatch5.1.5rc1
ORmortbayjettyMatch5.1.5rc2
ORmortbayjettyMatch5.1.11rc0
Related
cve
cve
CVE-2005-3747
2005-11-22 11:03:00
CVE-2006-2758
2006-06-02 01:02:00
cvelist
cvelist
CVE-2005-3747
2005-11-22 11:00:00
CVE-2006-2758
2006-06-02 01:00:00
prion
prion
Directory traversal
2006-06-02 01:02:00
github
github
Jetty Directory Traversal Vulnerability
2022-05-01 07:02:10
Mortbay Jetty Discloses JSP Source Code
2022-05-01 02:20:38
nvd
nvd
CVE-2006-2758
2006-06-02 01:02:00
osv
osv
Mortbay Jetty Discloses JSP Source Code
2022-05-01 02:20:38
Jetty Directory Traversal Vulnerability
2022-05-01 07:02:10
veracode
veracode
Directory Traversal
2018-11-14 00:52:53
Directory Traversal
2018-11-13 07:08:22
nessus
nessus
HP-UX PHSS_35436 : s700_800 11.04 Virtualvault 4.7 OWS (Apache 2.x) update
2006-11-22 00:00:00
HP-UX PHSS_35437 : s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update
2006-11-22 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.4%
Related for NVD:CVE-2005-3747