Jetty Web server / VMware vCenter directory traversal
Published:		20.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12042
Type:		remote
Level:		5/10
Description:

Affected:		VMWARE : vCenter Update Manager 4.0
CVE:		CVE-2011-4404 (The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.)

Original document

VMWARE, VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability (20.11.2011)

Discuss:

Read or add your comments to this news (0 comments)