CVE-2009-1523

EPSS 25.8%
Veröffentlicht 05.05.2009 17:30:00
Zuletzt bearbeitet 16.06.2026 23:07:26
Erkennungen
Login

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 22

NVD 332 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mortbay ≫ Jetty Version <= 6.1.16

Mortbay ≫ Jetty Update m2 Version <= 7.0.0

Mortbay ≫ Jetty Version 1.0

Mortbay ≫ Jetty Version 1.0.1

Mortbay ≫ Jetty Version 1.1

Mortbay ≫ Jetty Version 1.1.1

Mortbay ≫ Jetty Version 1.2.0

Mortbay ≫ Jetty Version 1.3.0

Mortbay ≫ Jetty Version 1.3.1

Mortbay ≫ Jetty Version 1.3.2

Mortbay ≫ Jetty Version 1.3.3

Mortbay ≫ Jetty Version 1.3.4

Mortbay ≫ Jetty Version 1.3.5

Mortbay ≫ Jetty Version 2.0 Update alpha1

Mortbay ≫ Jetty Version 2.0 Update alpha2

Mortbay ≫ Jetty Version 2.0 Update beta1

Mortbay ≫ Jetty Version 2.0 Update beta2

Mortbay ≫ Jetty Version 2.0.0

Mortbay ≫ Jetty Version 2.0.1

Mortbay ≫ Jetty Version 2.0.2

Mortbay ≫ Jetty Version 2.0.3

Mortbay ≫ Jetty Version 2.0.4

Mortbay ≫ Jetty Version 2.0.5

Mortbay ≫ Jetty Version 2.1.0

Mortbay ≫ Jetty Version 2.1.1

Mortbay ≫ Jetty Version 2.1.2

Mortbay ≫ Jetty Version 2.1.3

Mortbay ≫ Jetty Version 2.1.4

Mortbay ≫ Jetty Version 2.1.5

Mortbay ≫ Jetty Version 2.1.6

Mortbay ≫ Jetty Version 2.1.7

Mortbay ≫ Jetty Version 2.1.b0

Mortbay ≫ Jetty Version 2.1.b1

Mortbay ≫ Jetty Version 2.2 Update alpha0

Mortbay ≫ Jetty Version 2.2 Update alpha1

Mortbay ≫ Jetty Version 2.2 Update beta0

Mortbay ≫ Jetty Version 2.2 Update beta1

Mortbay ≫ Jetty Version 2.2 Update beta2

Mortbay ≫ Jetty Version 2.2 Update beta3

Mortbay ≫ Jetty Version 2.2 Update beta4

Mortbay ≫ Jetty Version 2.2.0

Mortbay ≫ Jetty Version 2.2.1

Mortbay ≫ Jetty Version 2.2.2

Mortbay ≫ Jetty Version 2.2.3

Mortbay ≫ Jetty Version 2.2.4

Mortbay ≫ Jetty Version 2.2.5

Mortbay ≫ Jetty Version 2.2.6

Mortbay ≫ Jetty Version 2.2.7

Mortbay ≫ Jetty Version 2.2.8

Mortbay ≫ Jetty Version 2.3.0

Mortbay ≫ Jetty Version 2.3.0a

Mortbay ≫ Jetty Version 2.3.1

Mortbay ≫ Jetty Version 2.3.2

Mortbay ≫ Jetty Version 2.3.3

Mortbay ≫ Jetty Version 2.3.4

Mortbay ≫ Jetty Version 2.3.5

Mortbay ≫ Jetty Version 2.4.0

Mortbay ≫ Jetty Version 2.4.1

Mortbay ≫ Jetty Version 2.4.2

Mortbay ≫ Jetty Version 2.4.3

Mortbay ≫ Jetty Version 2.4.4

Mortbay ≫ Jetty Version 2.4.5

Mortbay ≫ Jetty Version 2.4.6

Mortbay ≫ Jetty Version 2.4.7

Mortbay ≫ Jetty Version 2.4.8

Mortbay ≫ Jetty Version 2.4.9

Mortbay ≫ Jetty Version 3.0.0

Mortbay ≫ Jetty Version 3.0.0 Update rc1

Mortbay ≫ Jetty Version 3.0.0 Update rc2

Mortbay ≫ Jetty Version 3.0.0 Update rc3

Mortbay ≫ Jetty Version 3.0.0 Update rc4

Mortbay ≫ Jetty Version 3.0.0 Update rc5

Mortbay ≫ Jetty Version 3.0.0 Update rc6

Mortbay ≫ Jetty Version 3.0.0 Update rc7

Mortbay ≫ Jetty Version 3.0.0 Update rc8

Mortbay ≫ Jetty Version 3.0.1

Mortbay ≫ Jetty Version 3.0.2

Mortbay ≫ Jetty Version 3.0.3

Mortbay ≫ Jetty Version 3.0.4

Mortbay ≫ Jetty Version 3.0.5

Mortbay ≫ Jetty Version 3.0.6

Mortbay ≫ Jetty Version 3.0.a0

Mortbay ≫ Jetty Version 3.0.a1

Mortbay ≫ Jetty Version 3.0.a2

Mortbay ≫ Jetty Version 3.0.a3

Mortbay ≫ Jetty Version 3.0.a4

Mortbay ≫ Jetty Version 3.0.a5

Mortbay ≫ Jetty Version 3.0.a6

Mortbay ≫ Jetty Version 3.0.a7

Mortbay ≫ Jetty Version 3.0.a8

Mortbay ≫ Jetty Version 3.0.a9

Mortbay ≫ Jetty Version 3.0.a90

Mortbay ≫ Jetty Version 3.0.a91

Mortbay ≫ Jetty Version 3.0.a92

Mortbay ≫ Jetty Version 3.0.a93

Mortbay ≫ Jetty Version 3.0.a94

Mortbay ≫ Jetty Version 3.0.a95

Mortbay ≫ Jetty Version 3.0.a96

Mortbay ≫ Jetty Version 3.0.a97

Mortbay ≫ Jetty Version 3.0.a98

Mortbay ≫ Jetty Version 3.0.a99

Mortbay ≫ Jetty Version 3.0.b01

Mortbay ≫ Jetty Version 3.0.b02

Mortbay ≫ Jetty Version 3.0.b03

Mortbay ≫ Jetty Version 3.0.b04

Mortbay ≫ Jetty Version 3.0.b05

Mortbay ≫ Jetty Version 3.1 Update rc0

Mortbay ≫ Jetty Version 3.1 Update rc1

Mortbay ≫ Jetty Version 3.1 Update rc2

Mortbay ≫ Jetty Version 3.1 Update rc3

Mortbay ≫ Jetty Version 3.1 Update rc4

Mortbay ≫ Jetty Version 3.1 Update rc5

Mortbay ≫ Jetty Version 3.1 Update rc6

Mortbay ≫ Jetty Version 3.1 Update rc7

Mortbay ≫ Jetty Version 3.1 Update rc8

Mortbay ≫ Jetty Version 3.1 Update rc9

Mortbay ≫ Jetty Version 3.1.0

Mortbay ≫ Jetty Version 3.1.1

Mortbay ≫ Jetty Version 3.1.2

Mortbay ≫ Jetty Version 3.1.3

Mortbay ≫ Jetty Version 3.1.4

Mortbay ≫ Jetty Version 3.1.5

Mortbay ≫ Jetty Version 3.1.6

Mortbay ≫ Jetty Version 3.1.7

Mortbay ≫ Jetty Version 3.1.8

Mortbay ≫ Jetty Version 3.1.9

Mortbay ≫ Jetty Version 4.0 Update rc1

Mortbay ≫ Jetty Version 4.0 Update rc2

Mortbay ≫ Jetty Version 4.0 Update rc3

Mortbay ≫ Jetty Version 4.0.0

Mortbay ≫ Jetty Version 4.0.1

Mortbay ≫ Jetty Version 4.0.1 Update rc0

Mortbay ≫ Jetty Version 4.0.1 Update rc1

Mortbay ≫ Jetty Version 4.0.1 Update rc2

Mortbay ≫ Jetty Version 4.0.2

Mortbay ≫ Jetty Version 4.0.3

Mortbay ≫ Jetty Version 4.0.4

Mortbay ≫ Jetty Version 4.0.5

Mortbay ≫ Jetty Version 4.0.6

Mortbay ≫ Jetty Version 4.0.b0

Mortbay ≫ Jetty Version 4.0.b1

Mortbay ≫ Jetty Version 4.0.b2

Mortbay ≫ Jetty Version 4.0.d0

Mortbay ≫ Jetty Version 4.0.d1

Mortbay ≫ Jetty Version 4.0.d2

Mortbay ≫ Jetty Version 4.0.d3

Mortbay ≫ Jetty Version 4.0.d4

Mortbay ≫ Jetty Version 4.1.0

Mortbay ≫ Jetty Version 4.1.0 Update rc0

Mortbay ≫ Jetty Version 4.1.0 Update rc1

Mortbay ≫ Jetty Version 4.1.0 Update rc2

Mortbay ≫ Jetty Version 4.1.0 Update rc3

Mortbay ≫ Jetty Version 4.1.0 Update rc4

Mortbay ≫ Jetty Version 4.1.0 Update rc5

Mortbay ≫ Jetty Version 4.1.0 Update rc6

Mortbay ≫ Jetty Version 4.1.1

Mortbay ≫ Jetty Version 4.1.2

Mortbay ≫ Jetty Version 4.1.3

Mortbay ≫ Jetty Version 4.1.4

Mortbay ≫ Jetty Version 4.1.b0

Mortbay ≫ Jetty Version 4.1.b1

Mortbay ≫ Jetty Version 4.1.d0

Mortbay ≫ Jetty Version 4.1.d1

Mortbay ≫ Jetty Version 4.1.d2

Mortbay ≫ Jetty Version 4.2.0

Mortbay ≫ Jetty Version 4.2.0 Update beta0

Mortbay ≫ Jetty Version 4.2.0 Update rc0

Mortbay ≫ Jetty Version 4.2.0 Update rc1

Mortbay ≫ Jetty Version 4.2.1

Mortbay ≫ Jetty Version 4.2.2

Mortbay ≫ Jetty Version 4.2.3

Mortbay ≫ Jetty Version 4.2.4

Mortbay ≫ Jetty Version 4.2.4 Update rc0

Mortbay ≫ Jetty Version 4.2.5

Mortbay ≫ Jetty Version 4.2.6

Mortbay ≫ Jetty Version 4.2.7

Mortbay ≫ Jetty Version 4.2.8_01

Mortbay ≫ Jetty Version 4.2.9

Mortbay ≫ Jetty Version 4.2.9 Update rc1

Mortbay ≫ Jetty Version 4.2.9 Update rc2

Mortbay ≫ Jetty Version 4.2.10

Mortbay ≫ Jetty Version 4.2.10 Update pre0

Mortbay ≫ Jetty Version 4.2.10 Update pre1

Mortbay ≫ Jetty Version 4.2.10 Update pre2

Mortbay ≫ Jetty Version 4.2.12

Mortbay ≫ Jetty Version 4.2.14

Mortbay ≫ Jetty Version 4.2.14 Update rc0

Mortbay ≫ Jetty Version 4.2.14 Update rc1

Mortbay ≫ Jetty Version 4.2.15

Mortbay ≫ Jetty Version 4.2.15 Update rc0

Mortbay ≫ Jetty Version 4.2.16

Mortbay ≫ Jetty Version 4.2.17

Mortbay ≫ Jetty Version 4.2.18

Mortbay ≫ Jetty Version 4.2.19

Mortbay ≫ Jetty Version 4.2.20

Mortbay ≫ Jetty Version 4.2.20 Update rc0

Mortbay ≫ Jetty Version 4.2.21

Mortbay ≫ Jetty Version 4.2.22

Mortbay ≫ Jetty Version 4.2.23

Mortbay ≫ Jetty Version 4.2.23 Update rc0

Mortbay ≫ Jetty Version 4.2.24

Mortbay ≫ Jetty Version 4.2.24 Update rc0

Mortbay ≫ Jetty Version 4.2.24 Update rc1

Mortbay ≫ Jetty Version 4.2.25

Mortbay ≫ Jetty Version 4.2.26

Mortbay ≫ Jetty Version 4.2.27

Mortbay ≫ Jetty Version 5.0 Update alpha0

Mortbay ≫ Jetty Version 5.0 Update alpha1

Mortbay ≫ Jetty Version 5.0 Update alpha2

Mortbay ≫ Jetty Version 5.0 Update alpha3

Mortbay ≫ Jetty Version 5.0 Update beta0

Mortbay ≫ Jetty Version 5.0 Update beta1

Mortbay ≫ Jetty Version 5.0 Update beta2

Mortbay ≫ Jetty Version 5.0 Update rc1

Mortbay ≫ Jetty Version 5.0 Update rc2

Mortbay ≫ Jetty Version 5.0 Update rc3

Mortbay ≫ Jetty Version 5.0 Update rc4

Mortbay ≫ Jetty Version 5.0.0

Mortbay ≫ Jetty Version 5.0.0 Update rc0

Mortbay ≫ Jetty Version 5.1 Update rc0

Mortbay ≫ Jetty Version 5.1 Update rc1

Mortbay ≫ Jetty Version 5.1.0

Mortbay ≫ Jetty Version 5.1.1

Mortbay ≫ Jetty Version 5.1.1 Update rc0

Mortbay ≫ Jetty Version 5.1.1 Update rc1

Mortbay ≫ Jetty Version 5.1.2

Mortbay ≫ Jetty Version 5.1.2 Update pre0

Mortbay ≫ Jetty Version 5.1.3

Mortbay ≫ Jetty Version 5.1.3 Update rc0

Mortbay ≫ Jetty Version 5.1.3 Update rc1

Mortbay ≫ Jetty Version 5.1.3 Update rc2

Mortbay ≫ Jetty Version 5.1.3 Update rc3

Mortbay ≫ Jetty Version 5.1.3 Update rc4

Mortbay ≫ Jetty Version 5.1.4

Mortbay ≫ Jetty Version 5.1.4 Update rc0

Mortbay ≫ Jetty Version 5.1.5

Mortbay ≫ Jetty Version 5.1.5 Update rc0

Mortbay ≫ Jetty Version 5.1.5 Update rc1

Mortbay ≫ Jetty Version 5.1.5 Update rc2

Mortbay ≫ Jetty Version 5.1.6

Mortbay ≫ Jetty Version 5.1.7

Mortbay ≫ Jetty Version 5.1.7 Update rc0

Mortbay ≫ Jetty Version 5.1.8

Mortbay ≫ Jetty Version 5.1.9

Mortbay ≫ Jetty Version 5.1.10

Mortbay ≫ Jetty Version 5.1.11

Mortbay ≫ Jetty Version 5.1.11 Update rc0

Mortbay ≫ Jetty Version 5.1.12

Mortbay ≫ Jetty Version 5.1.13

Mortbay ≫ Jetty Version 5.1.14

Mortbay ≫ Jetty Version 6.0.0

Mortbay ≫ Jetty Version 6.0.0 Update alpha0

Mortbay ≫ Jetty Version 6.0.0 Update alpha1

Mortbay ≫ Jetty Version 6.0.0 Update alpha2

Mortbay ≫ Jetty Version 6.0.0 Update alpha3

Mortbay ≫ Jetty Version 6.0.0 Update beta0

Mortbay ≫ Jetty Version 6.0.0 Update beta1

Mortbay ≫ Jetty Version 6.0.0 Update beta10

Mortbay ≫ Jetty Version 6.0.0 Update beta11

Mortbay ≫ Jetty Version 6.0.0 Update beta12

Mortbay ≫ Jetty Version 6.0.0 Update beta14

Mortbay ≫ Jetty Version 6.0.0 Update beta15

Mortbay ≫ Jetty Version 6.0.0 Update beta16

Mortbay ≫ Jetty Version 6.0.0 Update beta17

Mortbay ≫ Jetty Version 6.0.0 Update beta2

Mortbay ≫ Jetty Version 6.0.0 Update beta3

Mortbay ≫ Jetty Version 6.0.0 Update beta4

Mortbay ≫ Jetty Version 6.0.0 Update beta5

Mortbay ≫ Jetty Version 6.0.0 Update beta6

Mortbay ≫ Jetty Version 6.0.0 Update beta7

Mortbay ≫ Jetty Version 6.0.0 Update beta8

Mortbay ≫ Jetty Version 6.0.0 Update beta9

Mortbay ≫ Jetty Version 6.0.0 Update betax

Mortbay ≫ Jetty Version 6.0.0 Update rc0

Mortbay ≫ Jetty Version 6.0.0 Update rc1

Mortbay ≫ Jetty Version 6.0.0 Update rc2

Mortbay ≫ Jetty Version 6.0.0 Update rc3

Mortbay ≫ Jetty Version 6.0.0 Update rc4

Mortbay ≫ Jetty Version 6.0.1

Mortbay ≫ Jetty Version 6.0.2

Mortbay ≫ Jetty Version 6.1.0

Mortbay ≫ Jetty Version 6.1.0 Update pre0

Mortbay ≫ Jetty Version 6.1.0 Update pre1

Mortbay ≫ Jetty Version 6.1.0 Update pre2

Mortbay ≫ Jetty Version 6.1.0 Update pre3

Mortbay ≫ Jetty Version 6.1.0 Update rc0

Mortbay ≫ Jetty Version 6.1.0 Update rc1

Mortbay ≫ Jetty Version 6.1.0 Update rc2

Mortbay ≫ Jetty Version 6.1.0 Update rc3

Mortbay ≫ Jetty Version 6.1.1

Mortbay ≫ Jetty Version 6.1.1 Update rc0

Mortbay ≫ Jetty Version 6.1.2

Mortbay ≫ Jetty Version 6.1.2 Update pre0

Mortbay ≫ Jetty Version 6.1.2 Update pre1

Mortbay ≫ Jetty Version 6.1.2 Update rc0

Mortbay ≫ Jetty Version 6.1.2 Update rc1

Mortbay ≫ Jetty Version 6.1.2 Update rc2

Mortbay ≫ Jetty Version 6.1.2 Update rc3

Mortbay ≫ Jetty Version 6.1.2 Update rc4

Mortbay ≫ Jetty Version 6.1.2 Update rc5

Mortbay ≫ Jetty Version 6.1.3

Mortbay ≫ Jetty Version 6.1.4

Mortbay ≫ Jetty Version 6.1.4 Update rc0

Mortbay ≫ Jetty Version 6.1.4 Update rc1

Mortbay ≫ Jetty Version 6.1.5

Mortbay ≫ Jetty Version 6.1.5 Update rc0

Mortbay ≫ Jetty Version 6.1.6

Mortbay ≫ Jetty Version 6.1.6 Update rc0

Mortbay ≫ Jetty Version 6.1.6 Update rc1

Mortbay ≫ Jetty Version 6.1.7

Mortbay ≫ Jetty Version 6.1.8

Mortbay ≫ Jetty Version 6.1.9

Mortbay ≫ Jetty Version 6.1.10

Mortbay ≫ Jetty Version 6.1.11

Mortbay ≫ Jetty Version 6.1.12

Mortbay ≫ Jetty Version 6.1.12 Update rc1

Mortbay ≫ Jetty Version 6.1.12 Update rc2

Mortbay ≫ Jetty Version 6.1.12 Update rc3

Mortbay ≫ Jetty Version 6.1.12 Update rc4

Mortbay ≫ Jetty Version 6.1.12 Update rc5

Mortbay ≫ Jetty Version 6.1.14

Mortbay ≫ Jetty Version 6.1.15

Mortbay ≫ Jetty Version 6.1.15 Update pre0

Mortbay ≫ Jetty Version 6.1.15 Update rc2

Mortbay ≫ Jetty Version 6.1.15 Update rc3

Mortbay ≫ Jetty Version 6.1.15 Update rc4

Mortbay ≫ Jetty Version 6.1.15 Update rc5

Mortbay ≫ Jetty Version 7.0.0

Mortbay ≫ Jetty Version 7.0.0 Update m1

Mortbay ≫ Jetty Version 7.0.0 Update pre0

Mortbay ≫ Jetty Version 7.0.0 Update pre1

Mortbay ≫ Jetty Version 7.0.0 Update pre3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	25.8%	0.977

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://secunia.com/advisories/35143

Vendor Advisory

http://secunia.com/advisories/35776

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html

http://www.vupen.com/english/advisories/2009/1900

Vendor Advisory

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388

http://jira.codehaus.org/browse/JETTY-1004

http://secunia.com/advisories/34975

Vendor Advisory

http://secunia.com/advisories/35225

Vendor Advisory

http://secunia.com/advisories/40553

Vendor Advisory

http://www.kb.cert.org/vuls/id/402580

US Government Resource

http://www.kb.cert.org/vuls/id/CRDY-7RKQCY

http://www.securityfocus.com/bid/34800

http://www.securityfocus.com/bid/35675

http://www.securitytracker.com/id?1022563

http://www.vupen.com/english/advisories/2010/1792

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=499867

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html

https://nvd.nist.gov/vuln/detail/CVE-2009-1523

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1523

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1523

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-1523