CVE-2006-5750 – JBoss Java Class DeploymentFileRepository Directory Traversal

https://notcve.org/view.php?id=CVE-2006-5750

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager. Vulnerabilidad de salto de directorio en la clase JBoss Application Server (jbossas) 3.2.4 hasta 4.0.5 permite a usuarios remotos validados leer o modificar archivos y posiblemente ejecutar código de su elección, a través de vectores no especificados en el administrador de consola. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402 http://jira.jboss.com/jira/browse/ASPATCH-126 http://jira.jboss.com/jira/browse/JBAS-3861 http://secunia.com/advisories/23095 http://secunia.com/advisories/23984 http://secunia.com/advisories/24104 http://secunia.com/advisories/29726 http://securitytracker.com/id?1017289 http://www.novell.com/linux/security/advisories/2007_02_sr.html http://www.osvdb.org/30767 http://www.redhat.com/support/ •