What is the severity of CVE-2006-2758?

CVE-2006-2758 has been assigned a moderate severity rating due to its potential for unauthorized file access.

How do I fix CVE-2006-2758?

To fix CVE-2006-2758, upgrade to a version of Jetty later than 6.0.beta16 to mitigate the directory traversal vulnerability.

What software is affected by CVE-2006-2758?

CVE-2006-2758 affects Jetty version 6.0.beta16 and earlier versions.

What type of vulnerability is CVE-2006-2758?

CVE-2006-2758 is classified as a directory traversal vulnerability allowing remote file reading.

Can CVE-2006-2758 lead to sensitive data exposure?

Yes, CVE-2006-2758 can allow attackers to access sensitive files on the server, leading to potential data exposure.

Vulnerability/
CVE-2006-2758

medium

CWE

2/6/2006

1/5/2022

12/2/2024

CVE-2006-2758: Path Traversal

First published: Fri Jun 02 2006(Updated: )

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
maven/org.mortbay.jetty:jetty	<=6.0.beta16
Eclipse Jetty	=6.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2006-2758?
CVE-2006-2758 has been assigned a moderate severity rating due to its potential for unauthorized file access.
How do I fix CVE-2006-2758?
To fix CVE-2006-2758, upgrade to a version of Jetty later than 6.0.beta16 to mitigate the directory traversal vulnerability.
What software is affected by CVE-2006-2758?
CVE-2006-2758 affects Jetty version 6.0.beta16 and earlier versions.
What type of vulnerability is CVE-2006-2758?
CVE-2006-2758 is classified as a directory traversal vulnerability allowing remote file reading.
Can CVE-2006-2758 lead to sensitive data exposure?
Yes, CVE-2006-2758 can allow attackers to access sensitive files on the server, leading to potential data exposure.

agent/type
agent/first-publish-date
collector/github-advisory-latest
source/GitHub
alias/GHSA-qmgj-5h75-jr67
alias/CVE-2006-2758
agent/software-canonical-lookup
agent/references
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-historical
vendor/jetty
product/jetty
canonical/jetty jetty
collector/nvd-cve
source/NVD
agent/softwarecombine
package-manager/maven
canonical/eclipse jetty
version/eclipse jetty/6.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2006-2758?
CVE-2006-2758 has been assigned a moderate severity rating due to its potential for unauthorized file access.
How do I fix CVE-2006-2758?
To fix CVE-2006-2758, upgrade to a version of Jetty later than 6.0.beta16 to mitigate the directory traversal vulnerability.
What software is affected by CVE-2006-2758?
CVE-2006-2758 affects Jetty version 6.0.beta16 and earlier versions.
What type of vulnerability is CVE-2006-2758?
CVE-2006-2758 is classified as a directory traversal vulnerability allowing remote file reading.
Can CVE-2006-2758 lead to sensitive data exposure?
Yes, CVE-2006-2758 can allow attackers to access sensitive files on the server, leading to potential data exposure.