CVE-2009-1523
Jetty 5.1.14 6.x < 6.1.17 and 7.x <= 7.0.0.M2 - Path Traversal via URI
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1523. PoCs published by Alexey Sintsov.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Jetty Web Server, allowing an attacker to access arbitrary files on the server by manipulating the URL path. The provided example shows how to retrieve a sensitive key file by traversing directories.
Description
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in Jetty Web Server, allowing an attacker to access arbitrary files on the server by manipulating the URL path. The provided example shows how to retrieve a sensitive key file by traversing directories.
This is a technical writeup detailing a directory traversal vulnerability in VMware Update Manager's Jetty web server, allowing unauthenticated file reads. It includes a sample exploit URL and references to vendor advisories.