medium5.0Public exploit code
CVE-2006-2758
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- promise webpam 2.2.0.13 - Multiple Vulnerabilities2012-03-07 · webapps · php
Impact
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetty | Jetty | Version 6.0 |