JBoss Web Server DeploymentFileRepository class directory traversal
Published:		28.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6867
Type:		library
Level:		5/10
Description:		setBaseDir() class function doesn't check base dir outside root application directory.

Affected:

JBOSS : JBoss Web Server 1.0

Original document

SYMANTEC, SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal (28.11.2006)

Discuss:

Read or add your comments to this news (0 comments)