Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.

This update fixes a problem in the JBOSS server where it was possible to potentially execute code if the console manager was enabled.
(CVE-2006-5750)

The remote web server contains a Java service that is affected by a directory traversal flaw.  The remote web server appears to be a version of JBoss that fails to sanitize user-supplied input to the BaseDir parameter used by the 'DeploymentFileRepository' service of JMX Console before using it to store or delete files.  An unauthenticated attacker may be able to exploit this to alter files on the remote host subject to the privileges of the JBoss user.

The remote web server appears to be a version of JBoss that fails to sanitize user-supplied input to the BaseDir parameter used by the 'DeploymentFileRepository' service of JMX Console before using it to store or delete files.  An unauthenticated attacker may be able to exploit this to alter files on the remote host subject to the privileges of the JBoss user.

ID	Name	Product	Family	Severity
27282	openSUSE 10 Security Update : jboss4 (jboss4-2304)	Nessus	SuSE Local Security Checks	high
27281	openSUSE 10 Security Update : jboss (jboss-2309)	Nessus	SuSE Local Security Checks	high
3862	JBoss JMX Console DeploymentFileRepository Directory Traversal File Manipulation	Nessus Network Monitor	CGI	medium
23843	JBoss Application Server (jbossas) JMX Console DeploymentFileRepository Traversal Arbitrary File Manipulation	Nessus	CGI abuses	high

Detections

Analytics

CVE-2006-5750

high

Tenable Plugins

high

high

medium

high