CVE-2004-2381

CVE-2004-2381 affects the Jetty HTTP Server prior to 4.2.19. The vulnerability arises in HttpRequest.java handling of HTTP requests with a large Content-Length, allowing remote attackers over the network to cause memory usage growth and a denial of service (application crash). Affected products a...

CVE-2002-1178

The CVE-2002-1178 entry concerns a directory traversal vulnerability in the Jetty HTTP server’s CGIServlet (affected: Jetty CGIServlet prior to 4.1.0). An attacker can craft requests to the cgi-bin directory using ..\ sequences to trigger arbitrary command execution. The provided documents identi...

CVE-2004-2478

The CVE-2004-2478 entry concerns Jetty HTTP Server in affected products (IBM Trading Partner Interchange < 4.2.4; CA Unicenter Web Services Distributed Management

CVE-2006-6969

Jetty (versions: before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, 6.1 before 6.1.0pre3) uses java.util.Random to generate session IDs. This leads to predictable session identifiers that remote attackers could brute-force to guess sessions, potentially bypass authentication and enable cross-sit...