Lucene search
CertccCVELIST:CVE-2007-5614HistoryDec 05, 2007 - 11:00 a.m.
CVE-2007-5614
2007-12-0511:00:00
certcc
www.cve.org
6
Mortbay Jetty before 6.1.6rc1 does not properly handle “certain quote sequences” in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.
References
osvdb.org/42496
secunia.com/advisories/27925
secunia.com/advisories/30941
secunia.com/advisories/35143
svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
www.kb.cert.org/vuls/id/438616
www.securityfocus.com/bid/26695
www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html
www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html
Related
cve
cve
CVE-2007-5614
2007-12-05 11:46:00
redhatcve
redhatcve
CVE-2007-5614
2019-10-04 21:10:06
osv
osv
Improper Authentication in Mortbay Jetty
2022-05-01 18:35:01
github
github
Improper Authentication in Mortbay Jetty
2022-05-01 18:35:01
prion
prion
Hardcoded credentials
2007-12-05 11:46:00
veracode
veracode
Session Hijacking
2018-11-15 01:29:46
nvd
nvd
CVE-2007-5614
2007-12-05 11:46:00
cert
cert
Mortbay Jetty fails to properly handle cookies with quotes
2007-12-04 00:00:00
openvas
openvas
Fedora Update for jetty FEDORA-2008-6141
2009-02-17 00:00:00
Fedora Update for jetty FEDORA-2008-6164
2009-02-17 00:00:00
FreeBSD Ports: jetty
2008-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: jetty-5.1.14-1jpp.2.fc9
2008-07-06 06:16:00
[SECURITY] Fedora 8 Update: jetty-5.1.14-1jpp.1.fc8
2008-07-06 06:17:49
freebsd
freebsd
jetty -- multiple vulnerabilities
2007-12-05 00:00:00
nessus
nessus
FreeBSD : jetty -- multiple vulnerabilities (6ae7cef2-a6ae-11dc-95e6-000c29c5647f)
2007-12-11 00:00:00
Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)
2008-07-08 00:00:00
Fedora 8 : jetty-5.1.14-1jpp.1.fc8 (2008-6164)
2008-07-08 00:00:00