JBoss Web Server DeploymentFileRepository class directory traversal

2006-11-2800:00:00

BUGTRAQ

vulners.com

setBaseDir() class function doesn't check base dir outside root application directory.

CPENameOperatorVersion
jboss web servereq1.0

CPE	Name	Operator	Version
	jboss web server	eq	1.0

References

vulners.com/securityvulns/securityvulns:doc:15243