Back to search
CVE-2007-5614
Published: Dec 5, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2008-6141
vendor-advisory
x_refsource_FEDORA
FEDORA-2008-6164
vendor-advisory
x_refsource_FEDORA
30941
third-party-advisory
x_refsource_SECUNIA
VU#438616
third-party-advisory
x_refsource_CERT-VN
26695
vdb-entry
x_refsource_BID
35143
third-party-advisory
x_refsource_SECUNIA
27925
third-party-advisory
x_refsource_SECUNIA
42496
vdb-entry
x_refsource_OSVDB
http://svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now