Mort Bay Jettyのリモートインスタンスには、テストサーブレット「webapps/test/jsp/dump.jsp」が含まれています。これは、動的コンテンツを生成するために使用する前にユーザー指定入力をサニタイズできません。未認証のリモートの攻撃者がこの問題を利用して、任意のHTMLまたはスクリプトコードをユーザーのブラウザに注入し、影響を受けるサイトのセキュリティコンテキスト内で実行できる可能性があります。 

Jetty自体だけでなく「webapps/snoop.jsp」サーブレットにも類似の問題が存在することが報告されていますが、Nessusではそれらは確認されませんでした。

- Bug #417411 - CVE-2007-5615: jetty CRLF injection

  - Bug #417391 - CVE-2007-5613: jetty cross site scripting

  - Bug #417401 - CVE-2007-5614: jetty session hijacking     issue

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

遠端 Mort Bay Jetty 執行個體有一個測試 Servlet「webapps/test/jsp/dump.jsp」，其未清理使用者提供的輸入便使用它來產生動態內容。未經驗證的遠端攻擊者可能會利用此問題，將任意 HTML 或指令碼插入使用者的瀏覽器中，藉此在受影響網站的安全性內容中執行。 

據報「webapps/snoop.jsp」Servlet 以及 Jetty 本身存在類似問題，但 Nessus 並未對此進行檢查。

The remote instance of Mort Bay Jetty includes a test servlet, 'webapps/test/jsp/dump.jsp', that fails to sanitize user-supplied input before using it to generate dynamic content.  An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the security context of the affected site. 

Similar issues reportedly exist with the 'webapps/snoop.jsp'' servlet as well as Jetty itself, although Nessus did not check for them.

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

Mortbay Jetty before 6.1.6rc1 does not properly handle 'certain quote sequences' in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

- Fri Jul 4 2008 Jeff Johnston <jjohnstn at redhat.com>     5.1.14-1jpp.1

    - Security patch

    - Resolves #417401, #417411, #417391

    - Upgrade to 5.1.14 source tarball for Fedora

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Websphere has been updated to version 2.1.0.1 to fix several security vulnerabilities in the included subprojects, such as Apache Geronimo and Tomcat. (CVE-2007-0184 / CVE-2007-0185 / CVE-2007-2377 / CVE-2007-2449 / CVE-2007-2450 / CVE-2007-3382 / CVE-2007-3385 / CVE-2007-3386 / CVE-2007-5333 / CVE-2007-5342 / CVE-2007-5461 / CVE-2007-5613 / CVE-2007-5615 / CVE-2007-6286 / CVE-2008-0002 / CVE-2008-1232 / CVE-2008-1947 / CVE-2008-2370 / CVE-2008-2938)

The remote host is running Jetty, a Java web server that can be downloaded off the Internet and is currently bundled with some IBM applications.  This version of Jetty is vulnerable to a remote flaw in the way that it handles cookie quotes.  An attacker exploiting this flaw would be able to hijack the session of valid users without authentication.  Further, this version of Jetty is vulnerable to a flaw in the way that it handles Carriage-Return/Line-Feed characters.  An attacker can exploit this flaw to inject malicious HTTP headers into a session.  This version of Jetty is also vulnerable to a cross-site scripting (XSS) attack that would allow an attacker to possibly retrieve sensitive data from client browsers.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
29219	Mort Bay Jetty Dump Servlet（webapps/test/jsp/dump.jsp）のXSS	Nessus	CGI abuses : XSS	2007/12/5	2022/4/11	medium
33417	Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)	Nessus	Fedora Local Security Checks	2008/7/8	2021/1/11	high
29219	Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS	Nessus	CGI abuses : XSS	2007/12/5	2022/4/11	medium
29219	Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS	Nessus	CGI abuses : XSS	2007/12/5	2022/4/11	medium
29288	FreeBSD : jetty -- multiple vulnerabilities (6ae7cef2-a6ae-11dc-95e6-000c29c5647f)	Nessus	FreeBSD Local Security Checks	2007/12/11	2021/1/6	high
33418	Fedora 8 : jetty-5.1.14-1jpp.1.fc8 (2008-6164)	Nessus	Fedora Local Security Checks	2008/7/8	2021/1/11	high
41596	SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 5850)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
4307	Jetty < 6.1.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2007/12/4	2019/3/6	medium

検出

プラグインの検索

medium

high

medium

medium

high

high

high

medium