← Back

CVE-2009-1523

nvd nist
Published: May 5, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.

Affected (332)

Products: Mortbay: Jetty
Mortbay
1 product
Jetty
Configuration A
332 vulnerable
Vulnerable SoftwareAffected Versions
Mortbay
Jetty
Up to 6.1.16
Jetty
Up to 7.0.0
Jetty
Version 1.0.1
Jetty
Version 1.0
Jetty
Version 1.1.1
Jetty
Version 1.1
Jetty
Version 1.2.0
Jetty
Version 1.3.0
Jetty
Version 1.3.1
Jetty
Version 1.3.2
Jetty
Version 1.3.3
Jetty
Version 1.3.4
Jetty
Version 1.3.5
Jetty
Version 2.0.0
Jetty
Version 2.0.1
Jetty
Version 2.0.2
Jetty
Version 2.0.3
Jetty
Version 2.0.4
Jetty
Version 2.0.5
Jetty
Version 2.0 alpha1
Jetty
Version 2.0 alpha2
Jetty
Version 2.0 beta1
Jetty
Version 2.0 beta2
Jetty
Version 2.1.0
Jetty
Version 2.1.1
Jetty
Version 2.1.2
Jetty
Version 2.1.3
Jetty
Version 2.1.4
Jetty
Version 2.1.5
Jetty
Version 2.1.6
Jetty
Version 2.1.7
Jetty
Version 2.1.b0
Jetty
Version 2.1.b1
Jetty
Version 2.2.0
Jetty
Version 2.2.1
Jetty
Version 2.2.2
Jetty
Version 2.2.3
Jetty
Version 2.2.4
Jetty
Version 2.2.5
Jetty
Version 2.2.6
Jetty
Version 2.2.7
Jetty
Version 2.2.8
Jetty
Version 2.2 alpha0
Jetty
Version 2.2 alpha1
Jetty
Version 2.2 beta0
Jetty
Version 2.2 beta1
Jetty
Version 2.2 beta2
Jetty
Version 2.2 beta3
Jetty
Version 2.2 beta4
Jetty
Version 2.3.0
Jetty
Version 2.3.0a
Jetty
Version 2.3.1
Jetty
Version 2.3.2
Jetty
Version 2.3.3
Jetty
Version 2.3.4
Jetty
Version 2.3.5
Jetty
Version 2.4.0
Jetty
Version 2.4.1
Jetty
Version 2.4.2
Jetty
Version 2.4.3
Jetty
Version 2.4.4
Jetty
Version 2.4.5
Jetty
Version 2.4.6
Jetty
Version 2.4.7
Jetty
Version 2.4.8
Jetty
Version 2.4.9
Jetty
Version 3.0.0
Jetty
Version 3.0.0 rc1
Jetty
Version 3.0.0 rc2
Jetty
Version 3.0.0 rc3
Jetty
Version 3.0.0 rc4
Jetty
Version 3.0.0 rc5
Jetty
Version 3.0.0 rc6
Jetty
Version 3.0.0 rc7
Jetty
Version 3.0.0 rc8
Jetty
Version 3.0.1
Jetty
Version 3.0.2
Jetty
Version 3.0.3
Jetty
Version 3.0.4
Jetty
Version 3.0.5
Jetty
Version 3.0.6
Jetty
Version 3.0.a0
Jetty
Version 3.0.a1
Jetty
Version 3.0.a2
Jetty
Version 3.0.a3
Jetty
Version 3.0.a4
Jetty
Version 3.0.a5
Jetty
Version 3.0.a6
Jetty
Version 3.0.a7
Jetty
Version 3.0.a8
Jetty
Version 3.0.a90
Jetty
Version 3.0.a91
Jetty
Version 3.0.a92
Jetty
Version 3.0.a93
Jetty
Version 3.0.a94
Jetty
Version 3.0.a95
Jetty
Version 3.0.a96
Jetty
Version 3.0.a97
Jetty
Version 3.0.a98
Jetty
Version 3.0.a99
Jetty
Version 3.0.a9
Jetty
Version 3.0.b01
Jetty
Version 3.0.b02
Jetty
Version 3.0.b03
Jetty
Version 3.0.b04
Jetty
Version 3.0.b05
Jetty
Version 3.1.0
Jetty
Version 3.1.1
Jetty
Version 3.1.2
Jetty
Version 3.1.3
Jetty
Version 3.1.4
Jetty
Version 3.1.5
Jetty
Version 3.1.6
Jetty
Version 3.1.7
Jetty
Version 3.1.8
Jetty
Version 3.1.9
Jetty
Version 3.1 rc0
Jetty
Version 3.1 rc1
Jetty
Version 3.1 rc2
Jetty
Version 3.1 rc3
Jetty
Version 3.1 rc4
Jetty
Version 3.1 rc5
Jetty
Version 3.1 rc6
Jetty
Version 3.1 rc7
Jetty
Version 3.1 rc8
Jetty
Version 3.1 rc9
Jetty
Version 4.0.0
Jetty
Version 4.0.1
Jetty
Version 4.0.1 rc0
Jetty
Version 4.0.1 rc1
Jetty
Version 4.0.1 rc2
Jetty
Version 4.0.2
Jetty
Version 4.0.3
Jetty
Version 4.0.4
Jetty
Version 4.0.5
Jetty
Version 4.0.6
Jetty
Version 4.0.b0
Jetty
Version 4.0.b1
Jetty
Version 4.0.b2
Jetty
Version 4.0.d0
Jetty
Version 4.0.d1
Jetty
Version 4.0.d2
Jetty
Version 4.0.d3
Jetty
Version 4.0.d4
Jetty
Version 4.0 rc1
Jetty
Version 4.0 rc2
Jetty
Version 4.0 rc3
Jetty
Version 4.1.0
Jetty
Version 4.1.0 rc0
Jetty
Version 4.1.0 rc1
Jetty
Version 4.1.0 rc2
Jetty
Version 4.1.0 rc3
Jetty
Version 4.1.0 rc4
Jetty
Version 4.1.0 rc5
Jetty
Version 4.1.0 rc6
Jetty
Version 4.1.1
Jetty
Version 4.1.2
Jetty
Version 4.1.3
Jetty
Version 4.1.4
Jetty
Version 4.1.b0
Jetty
Version 4.1.b1
Jetty
Version 4.1.d0
Jetty
Version 4.1.d1
Jetty
Version 4.1.d2
Jetty
Version 4.2.0
Jetty
Version 4.2.0 beta0
Jetty
Version 4.2.0 rc0
Jetty
Version 4.2.0 rc1
Jetty
Version 4.2.10
Jetty
Version 4.2.10 pre0
Jetty
Version 4.2.10 pre1
Jetty
Version 4.2.10 pre2
Jetty
Version 4.2.12
Jetty
Version 4.2.14
Jetty
Version 4.2.14 rc0
Jetty
Version 4.2.14 rc1
Jetty
Version 4.2.15
Jetty
Version 4.2.15 rc0
Jetty
Version 4.2.16
Jetty
Version 4.2.17
Jetty
Version 4.2.18
Jetty
Version 4.2.19
Jetty
Version 4.2.1
Jetty
Version 4.2.20
Jetty
Version 4.2.20 rc0
Jetty
Version 4.2.21
Jetty
Version 4.2.22
Jetty
Version 4.2.23
Jetty
Version 4.2.23 rc0
Jetty
Version 4.2.24
Jetty
Version 4.2.24 rc0
Jetty
Version 4.2.24 rc1
Jetty
Version 4.2.25
Jetty
Version 4.2.26
Jetty
Version 4.2.27
Jetty
Version 4.2.2
Jetty
Version 4.2.3
Jetty
Version 4.2.4
Jetty
Version 4.2.4 rc0
Jetty
Version 4.2.5
Jetty
Version 4.2.6
Jetty
Version 4.2.7
Jetty
Version 4.2.8_01
Jetty
Version 4.2.9
Jetty
Version 4.2.9 rc1
Jetty
Version 4.2.9 rc2
Jetty
Version 5.0.0
Jetty
Version 5.0.0 rc0
Jetty
Version 5.0 alpha0
Jetty
Version 5.0 alpha1
Jetty
Version 5.0 alpha2
Jetty
Version 5.0 alpha3
Jetty
Version 5.0 beta0
Jetty
Version 5.0 beta1
Jetty
Version 5.0 beta2
Jetty
Version 5.0 rc1
Jetty
Version 5.0 rc2
Jetty
Version 5.0 rc3
Jetty
Version 5.0 rc4
Jetty
Version 5.1.0
Jetty
Version 5.1.10
Jetty
Version 5.1.11
Jetty
Version 5.1.11 rc0
Jetty
Version 5.1.12
Jetty
Version 5.1.13
Jetty
Version 5.1.14
Jetty
Version 5.1.1
Jetty
Version 5.1.1 rc0
Jetty
Version 5.1.1 rc1
Jetty
Version 5.1.2
Jetty
Version 5.1.2 pre0
Jetty
Version 5.1.3
Jetty
Version 5.1.3 rc0
Jetty
Version 5.1.3 rc1
Jetty
Version 5.1.3 rc2
Jetty
Version 5.1.3 rc3
Jetty
Version 5.1.3 rc4
Jetty
Version 5.1.4
Jetty
Version 5.1.4 rc0
Jetty
Version 5.1.5
Jetty
Version 5.1.5 rc0
Jetty
Version 5.1.5 rc1
Jetty
Version 5.1.5 rc2
Jetty
Version 5.1.6
Jetty
Version 5.1.7
Jetty
Version 5.1.7 rc0
Jetty
Version 5.1.8
Jetty
Version 5.1.9
Jetty
Version 5.1 rc0
Jetty
Version 5.1 rc1
Jetty
Version 6.0.0
Jetty
Version 6.0.0 alpha0
Jetty
Version 6.0.0 alpha1
Jetty
Version 6.0.0 alpha2
Jetty
Version 6.0.0 alpha3
Jetty
Version 6.0.0 beta0
Jetty
Version 6.0.0 beta10
Jetty
Version 6.0.0 beta11
Jetty
Version 6.0.0 beta12
Jetty
Version 6.0.0 beta14
Jetty
Version 6.0.0 beta15
Jetty
Version 6.0.0 beta16
Jetty
Version 6.0.0 beta17
Jetty
Version 6.0.0 beta1
Jetty
Version 6.0.0 beta2
Jetty
Version 6.0.0 beta3
Jetty
Version 6.0.0 beta4
Jetty
Version 6.0.0 beta5
Jetty
Version 6.0.0 beta6
Jetty
Version 6.0.0 beta7
Jetty
Version 6.0.0 beta8
Jetty
Version 6.0.0 beta9
Jetty
Version 6.0.0 betax
Jetty
Version 6.0.0 rc0
Jetty
Version 6.0.0 rc1
Jetty
Version 6.0.0 rc2
Jetty
Version 6.0.0 rc3
Jetty
Version 6.0.0 rc4
Jetty
Version 6.0.1
Jetty
Version 6.0.2
Jetty
Version 6.1.0
Jetty
Version 6.1.0 pre0
Jetty
Version 6.1.0 pre1
Jetty
Version 6.1.0 pre2
Jetty
Version 6.1.0 pre3
Jetty
Version 6.1.0 rc0
Jetty
Version 6.1.0 rc1
Jetty
Version 6.1.0 rc2
Jetty
Version 6.1.0 rc3
Jetty
Version 6.1.10
Jetty
Version 6.1.11
Jetty
Version 6.1.12
Jetty
Version 6.1.12 rc1
Jetty
Version 6.1.12 rc2
Jetty
Version 6.1.12 rc3
Jetty
Version 6.1.12 rc4
Jetty
Version 6.1.12 rc5
Jetty
Version 6.1.14
Jetty
Version 6.1.15
Jetty
Version 6.1.15 pre0
Jetty
Version 6.1.15 rc2
Jetty
Version 6.1.15 rc3
Jetty
Version 6.1.15 rc4
Jetty
Version 6.1.15 rc5
Jetty
Version 6.1.1
Jetty
Version 6.1.1 rc0
Jetty
Version 6.1.2
Jetty
Version 6.1.2 pre0
Jetty
Version 6.1.2 pre1
Jetty
Version 6.1.2 rc0
Jetty
Version 6.1.2 rc1
Jetty
Version 6.1.2 rc2
Jetty
Version 6.1.2 rc3
Jetty
Version 6.1.2 rc4
Jetty
Version 6.1.2 rc5
Jetty
Version 6.1.3
Jetty
Version 6.1.4
Jetty
Version 6.1.4 rc0
Jetty
Version 6.1.4 rc1
Jetty
Version 6.1.5
Jetty
Version 6.1.5 rc0
Jetty
Version 6.1.6
Jetty
Version 6.1.6 rc0
Jetty
Version 6.1.6 rc1
Jetty
Version 6.1.7
Jetty
Version 6.1.8
Jetty
Version 6.1.9
Jetty
Version 7.0.0
Jetty
Version 7.0.0 m1
Jetty
Version 7.0.0 pre0
Jetty
Version 7.0.0 pre1
Jetty
Version 7.0.0 pre3

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (38)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.