Vulnerability in Jboss Jboss_application_server
CVE-2006-5750
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via…
EPSS: 0.135 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Jboss Jboss_application_server — versions 3.2.5_final, 3.2.6_final, 3.2.7_final
- N/a — versions n/a
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (x_refsource_HP, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Patch)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (Patch, vdb-entry, x_refsource_BID)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2006-5750?
- CVE-2006-5750 is a vulnerability in Jboss Jboss_application_server. Published 2006-11-27.
- Is CVE-2006-5750 known to be exploited?
- 10 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.