Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal Nov 28 2006 05:21AM
Jon Hart (jhart spoofed org)
On Mon, Nov 27, 2006 at 05:36:29PM -0000, research (at) symantec (dot) com [email concealed] wrote:
> Vendor Response:
>
> Red Hat has verified the flaw in the DeploymentFileRepository class
> of the JBoss application server. A remote attacker who is able to
> access the console manager could read or write to files with the
>...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus