CVE-2009-1523: Directory Traversal in Mort Bay Jetty
Summary
CVE-2009-1523: Directory traversal in Mort Bay Jetty. Affects org.mortbay.jetty:jetty across 2 version ranges.
< 6.1.17
>= 7.0.0.M0, < 7.0.0.M2
Fixed in 6.1.17 or 7.0.0.M2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mort Bay Jetty is an HTTP server that provides a platform for hosting Java web applications. It is widely used for its lightweight and scalable nature. However, versions 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 of Mort Bay Jetty are vulnerable to a directory traversal attack. This vulnerability allows remote attackers to access arbitrary files by exploiting directory traversal sequences in the URI.
Vulnerability Detail
The directory traversal vulnerability in Mort Bay Jetty allows an attacker to bypass the intended access restrictions and retrieve sensitive files from the server. By manipulating the URI, an attacker can traverse directories and access files outside the intended scope. This can lead to unauthorized disclosure of sensitive information, such as configuration files or user data. The vulnerability has a CVSS score of 5.3, indicating a moderate severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 6.1.176.1.17 -
>= 7.0.0.M0, < 7.0.0.M27.0.0.M2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading to a patched version is not immediately feasible, a temporary workaround is to implement input validation and sanitization on the server-side. This can help mitigate the risk of directory traversal attacks by blocking malicious requests that contain traversal sequences in the URI. Here is an example of how input validation can be implemented in Java:
String sanitizedUri = uri.replaceAll("\.\.", "");
Conclusion
The directory traversal vulnerability in Mort Bay Jetty can be mitigated by upgrading to the patched versions or by implementing input validation and sanitization. It is crucial to address this vulnerability promptly to prevent unauthorized access to sensitive files. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.mortbay.jetty:jetty →
FAQ
Directory traversal, also known as path traversal, is a vulnerability that allows an attacker to access files and directories outside the intended scope of an application. By manipulating input parameters, such as the URI, an attacker can traverse directories and access sensitive files.
A successful directory traversal attack can lead to unauthorized access to sensitive files, including configuration files, user data, and even executable files. This can result in data breaches, information disclosure, and potential remote code execution.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file of your application.
While there may not be a specific known exploit for this vulnerability in Mort Bay Jetty, it is important to address it promptly to prevent potential attacks. Attackers can leverage directory traversal vulnerabilities to gain unauthorized access to sensitive files and escalate their privileges.
You can find more information about Mort Bay Jetty on their official website (https://www.eclipse.org/jetty/). Security updates and patches can be obtained from the official Mort Bay Jetty repository or through your package manager.
Related vulnerabilities
Recent vulnerabilities recorded for org.mortbay.jetty:jetty.
