CVE-2002-1178: Medium severity Jetty Jetty HTTP server vulnerability
Published Oct 11, 2002
·Updated
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
Affected Software
1 affected component
Jetty Jetty HTTP server<=4.1.0
Remediation
Patch Available
Event History
Oct 11, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1178?
CVE-2002-1178 is classified as a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary commands.
2
How do I fix CVE-2002-1178?
To fix CVE-2002-1178, upgrade the Jetty HTTP server to version 4.1.0 or later.
3
What types of attacks can be performed due to CVE-2002-1178?
Due to CVE-2002-1178, attackers can perform directory traversal attacks to execute arbitrary commands on the server.
4
Which versions of Jetty are affected by CVE-2002-1178?
CVE-2002-1178 affects Jetty HTTP server versions prior to 4.1.0.
5
Is CVE-2002-1178 exploitable over the internet?
Yes, CVE-2002-1178 is exploitable over the internet if the vulnerable Jetty server is exposed to external users.