CVE-2006-5750

Published: Nov 27, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.

Affected (12)

Products: Jboss: Jboss Application Server

1 product

Jboss Application Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Jboss Jboss Application Server	Version 3.2.5_final
Jboss Jboss Application Server	Version 3.2.6_final
Jboss Jboss Application Server	Version 3.2.7_final
Jboss Jboss Application Server	Version 3.2.8.sp1
Jboss Jboss Application Server	Version 3.2.8_final
Jboss Jboss Application Server	Version 4.0.0_final
Jboss Jboss Application Server	Version 4.0.1_final
Jboss Jboss Application Server	Version 4.0.1_sp1
Jboss Jboss Application Server	Version 4.0.2_final
Jboss Jboss Application Server	Version 4.0.3_final
Jboss Jboss Application Server	Version 4.0.4.ga
Jboss Jboss Application Server	Version 4.0.5.ga

References (38)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402

Source: secalert@redhat.com

http://jira.jboss.com/jira/browse/ASPATCH-126

Source: secalert@redhat.com

http://jira.jboss.com/jira/browse/JBAS-3861

Source: secalert@redhat.com

http://secunia.com/advisories/23095

Source: secalert@redhat.com

http://secunia.com/advisories/23984

Source: secalert@redhat.com

http://secunia.com/advisories/24104

Source: secalert@redhat.com

http://secunia.com/advisories/29726

Source: secalert@redhat.com

http://securitytracker.com/id?1017289

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_02_sr.html

Source: secalert@redhat.com

http://www.osvdb.org/30767

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0743.html

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/archive/1/452830/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/452862/100/100/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21219

Source: secalert@redhat.com

Patch

http://www.vupen.com/english/advisories/2006/4724

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4726

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0554

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1155/references

Source: secalert@redhat.com

https://secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.html

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402

Source: af854a3a-2127-422b-91ae-364da2661108

http://jira.jboss.com/jira/browse/ASPATCH-126

Source: af854a3a-2127-422b-91ae-364da2661108

http://jira.jboss.com/jira/browse/JBAS-3861

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23095

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23984

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24104

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29726

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017289

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_02_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30767

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0743.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/archive/1/452830/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/452862/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21219

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/4724

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4726

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0554

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1155/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.