EUVD-2003-1142

Malware in sbrugna...

Jetty invalid URI parsing may produce invalid HttpURI.authority

Description URI use within Jetty's HttpURI class can parse invalid URIs such as http://localhost;/path as having an authority with a host of localhost;. A URIs of the type http://localhost;/path should be interpreted to be either invalid or as localhost; to be the userinfo and no host. However,...

Improper Authorization in org.cometd.oort

Impact Internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may be able to watch cluster-internal traffic that contains other user's possibly sensitive data. By publishi...

CORE-2009-0922: Jetty Persistent XSS in Sample Cookies Application

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Jetty Persistent XSS in Sample Cookies Application 1. Advisory Information Title: Jetty Persistent XSS in Sample Cookies Application Advisory Id: CORE-2009-0922...

CVE-2003-1152

WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp encoded "?"...

CVE-2003-1152

CVE-2003-1152 affects WebTide 7.04, where an HTTP request for %3f.jsp (encoded “?”) can cause remote attackers to list arbitrary directories. The vulnerability description confirms the issue exists in WebTide 7.04; no detailed root-cause or affected subcomponents are provided beyond this director...

CVE-2003-1152

WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp encoded "?"...

[Full-Disclosure] STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability

STG Security Advisory: SSA-20031025-05 InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability Revision 1.0 Date Published: 2003-10-25 KST Last Update: 2003-10-25 Disclosed by SSR Team [email protected] Abstract ======== InfronTech's J2EE Web Application Server, WebTide, is a...