CVE-2004-2478

Jetty HTTP Server - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

References (11)

Core 11
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12703
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3873
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11330
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22229
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016975
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/447648/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1011545
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17600
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/10490

Scores

EPSS 0.0242
EPSS Percentile 82.5%

Details

Status published
Products (21)
ca/unicenter_web_services_distributed_management < 3.1
ibm/trading_partner_interchange 4.2.1
ibm/trading_partner_interchange < 4.2.2
jetty/jetty_http_server 3.1.6
jetty/jetty_http_server 3.1.7
jetty/jetty_http_server 4.1.0
jetty/jetty_http_server 4.1.0_rc4
jetty/jetty_http_server 4.1.1
jetty/jetty_http_server 4.2.4
jetty/jetty_http_server 4.2.5
... and 11 more
Published Dec 31, 2004
Tracked Since Feb 18, 2026