OSVDB ID: 42496

Title: Jetty HTML Cookie Parameter Unspecified Character Sequence Hijacking Weakness

Info

Disclosure

Nov 05, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Disclosure: Vendor Verified

Solution

Upgrade to version 6.1.6rc1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

CVE ID: 2007-5614 (see also: NVD)
Bugtraq ID: 26695
Secunia Advisory ID: 27925 30941 35143
Related OSVDB ID: 42495 42497
CERT VU: 438616
Vendor Specific Solution URL: http://dist.codehaus.org/jetty/jetty-5.1.x/
Vendor Specific News/Changelog Entry: http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
Other Advisory URL: https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/42496