CVE-2009-4611
Description
Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator, related to (1) a string value in the Age parameter to the default URI for the Cookie Dump Servlet in test-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/expr.jsp, or (3) an alphabetic value in the Content-Length HTTP header to an arbitrary application.
| Software | From | Fixed in |
|---|---|---|
| mortbay / jetty | 6.0.0 | 6.0.0.x |
| mortbay / jetty | 6.0.0-alpha0 | 6.0.0-alpha0.x |
| mortbay / jetty | 6.0.0-alpha1 | 6.0.0-alpha1.x |
| mortbay / jetty | 6.0.0-alpha2 | 6.0.0-alpha2.x |
| mortbay / jetty | 6.0.0-alpha3 | 6.0.0-alpha3.x |
| mortbay / jetty | 6.0.0-beta0 | 6.0.0-beta0.x |
| mortbay / jetty | 6.0.0-beta1 | 6.0.0-beta1.x |
| mortbay / jetty | 6.0.0-beta10 | 6.0.0-beta10.x |
| mortbay / jetty | 6.0.0-beta11 | 6.0.0-beta11.x |
| mortbay / jetty | 6.0.0-beta12 | 6.0.0-beta12.x |
| mortbay / jetty | 6.0.0-beta14 | 6.0.0-beta14.x |
| mortbay / jetty | 6.0.0-beta15 | 6.0.0-beta15.x |
| mortbay / jetty | 6.0.0-beta16 | 6.0.0-beta16.x |
| mortbay / jetty | 6.0.0-beta17 | 6.0.0-beta17.x |
| mortbay / jetty | 6.0.0-beta2 | 6.0.0-beta2.x |
| mortbay / jetty | 6.0.0-beta3 | 6.0.0-beta3.x |
| mortbay / jetty | 6.0.0-beta4 | 6.0.0-beta4.x |
| mortbay / jetty | 6.0.0-beta5 | 6.0.0-beta5.x |
| mortbay / jetty | 6.0.0-beta6 | 6.0.0-beta6.x |
| mortbay / jetty | 6.0.0-beta7 | 6.0.0-beta7.x |
| mortbay / jetty | 6.0.0-beta8 | 6.0.0-beta8.x |
| mortbay / jetty | 6.0.0-beta9 | 6.0.0-beta9.x |
| mortbay / jetty | 6.0.0-betax | 6.0.0-betax.x |
| mortbay / jetty | 6.0.0-rc0 | 6.0.0-rc0.x |
| mortbay / jetty | 6.0.0-rc1 | 6.0.0-rc1.x |
| mortbay / jetty | 6.0.0-rc2 | 6.0.0-rc2.x |
| mortbay / jetty | 6.0.0-rc3 | 6.0.0-rc3.x |
| mortbay / jetty | 6.0.0-rc4 | 6.0.0-rc4.x |
| mortbay / jetty | 6.0.1 | 6.0.1.x |
| mortbay / jetty | 6.0.2 | 6.0.2.x |
| mortbay / jetty | 6.1.0 | 6.1.0.x |
| mortbay / jetty | 6.1.0-pre0 | 6.1.0-pre0.x |
| mortbay / jetty | 6.1.0-pre1 | 6.1.0-pre1.x |
| mortbay / jetty | 6.1.0-pre2 | 6.1.0-pre2.x |
| mortbay / jetty | 6.1.0-pre3 | 6.1.0-pre3.x |
| mortbay / jetty | 6.1.0-rc0 | 6.1.0-rc0.x |
| mortbay / jetty | 6.1.0-rc1 | 6.1.0-rc1.x |
| mortbay / jetty | 6.1.0-rc2 | 6.1.0-rc2.x |
| mortbay / jetty | 6.1.0-rc3 | 6.1.0-rc3.x |
| mortbay / jetty | 6.1.1 | 6.1.1.x |
| mortbay / jetty | 6.1.1-rc0 | 6.1.1-rc0.x |
| mortbay / jetty | 6.1.10 | 6.1.10.x |
| mortbay / jetty | 6.1.11 | 6.1.11.x |
| mortbay / jetty | 6.1.12 | 6.1.12.x |
| mortbay / jetty | 6.1.12-rc1 | 6.1.12-rc1.x |
| mortbay / jetty | 6.1.12-rc2 | 6.1.12-rc2.x |
| mortbay / jetty | 6.1.12-rc3 | 6.1.12-rc3.x |
| mortbay / jetty | 6.1.12-rc4 | 6.1.12-rc4.x |
| mortbay / jetty | 6.1.12-rc5 | 6.1.12-rc5.x |
| mortbay / jetty | 6.1.14 | 6.1.14.x |
| mortbay / jetty | 6.1.15 | 6.1.15.x |
| mortbay / jetty | 6.1.15-pre0 | 6.1.15-pre0.x |
| mortbay / jetty | 6.1.15-rc2 | 6.1.15-rc2.x |
| mortbay / jetty | 6.1.15-rc3 | 6.1.15-rc3.x |
| mortbay / jetty | 6.1.15-rc4 | 6.1.15-rc4.x |
| mortbay / jetty | 6.1.15-rc5 | 6.1.15-rc5.x |
| mortbay / jetty | 6.1.16 | 6.1.16.x |
| mortbay / jetty | 6.1.19 | 6.1.19.x |
| mortbay / jetty | 6.1.2 | 6.1.2.x |
| mortbay / jetty | 6.1.2-pre0 | 6.1.2-pre0.x |
| mortbay / jetty | 6.1.2-pre1 | 6.1.2-pre1.x |
| mortbay / jetty | 6.1.2-rc0 | 6.1.2-rc0.x |
| mortbay / jetty | 6.1.2-rc1 | 6.1.2-rc1.x |
| mortbay / jetty | 6.1.2-rc2 | 6.1.2-rc2.x |
| mortbay / jetty | 6.1.2-rc3 | 6.1.2-rc3.x |
| mortbay / jetty | 6.1.2-rc4 | 6.1.2-rc4.x |
| mortbay / jetty | 6.1.2-rc5 | 6.1.2-rc5.x |
| mortbay / jetty | 6.1.20 | 6.1.20.x |
| mortbay / jetty | 6.1.3 | 6.1.3.x |
| mortbay / jetty | 6.1.4 | 6.1.4.x |
| mortbay / jetty | 6.1.4-rc0 | 6.1.4-rc0.x |
| mortbay / jetty | 6.1.4-rc1 | 6.1.4-rc1.x |
| mortbay / jetty | 6.1.5 | 6.1.5.x |
| mortbay / jetty | 6.1.5-rc0 | 6.1.5-rc0.x |
| mortbay / jetty | 6.1.6 | 6.1.6.x |
| mortbay / jetty | 6.1.6-rc0 | 6.1.6-rc0.x |
| mortbay / jetty | 6.1.6-rc1 | 6.1.6-rc1.x |
| mortbay / jetty | 6.1.7 | 6.1.7.x |
| mortbay / jetty | 6.1.8 | 6.1.8.x |
| mortbay / jetty | 6.1.9 | 6.1.9.x |
| mortbay / jetty | 7.0.0 | 7.0.0.x |
org.mortbay.jetty / jetty
|
6.0.0 | 6.1.23 |
|
org.mortbay.jetty / jetty
|
7.0.0 | 7.0.2 |