CVE

Id
10904  
CVE No.
CVE-2004-2478  
Status
Candidate  
Description
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.  
Phase
Assigned (20050821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76220 10904 CVE-2004-2478 BUGTRAQ:20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability  View
76221 10904 CVE-2004-2478 URL:http://www.securityfocus.com/archive/1/archive/1/447648/100/0/threaded  View
76222 10904 CVE-2004-2478 FULLDISC:20061003 [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability  View
76223 10904 CVE-2004-2478 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html  View
76224 10904 CVE-2004-2478 MISC:http://www-1.ibm.com/support/docview.wss?uid=swg21178665  View
76225 10904 CVE-2004-2478 BID:11330  View
76226 10904 CVE-2004-2478 URL:http://www.securityfocus.com/bid/11330  View
76227 10904 CVE-2004-2478 VUPEN:ADV-2006-3873  View
76228 10904 CVE-2004-2478 URL:http://www.vupen.com/english/advisories/2006/3873  View
76229 10904 CVE-2004-2478 OSVDB:10490  View
76230 10904 CVE-2004-2478 URL:http://www.osvdb.org/10490  View
76231 10904 CVE-2004-2478 SECTRACK:1011545  View
76232 10904 CVE-2004-2478 URL:http://securitytracker.com/id?1011545  View
76233 10904 CVE-2004-2478 SECTRACK:1016975  View
76234 10904 CVE-2004-2478 URL:http://securitytracker.com/id?1016975  View
76235 10904 CVE-2004-2478 SECUNIA:12703  View
76236 10904 CVE-2004-2478 URL:http://secunia.com/advisories/12703  View
76237 10904 CVE-2004-2478 SECUNIA:22229  View
76238 10904 CVE-2004-2478 URL:http://secunia.com/advisories/22229  View
76239 10904 CVE-2004-2478 XF:trading-partner-gain-access(17600)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63157 JVNDB-2004-000499 Squid のエラーメッセージの表示処理における情報漏洩の脆弱性 Squid には、DNS 名前解決に失敗するなどの特定の条件下において、解放されたメモリを参照してしまうため、無効なリクエストに対するクライアントへのレスポンスとして、他のリクエストにより生成されたデータなどの内部情報をランダムに返してしまう脆弱性が存在します。 CVE-2004-2479 10904 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000499.html  View