CVE-2004-2478

Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html
• http://secunia.com/advisories/12703Vendor Advisory
• http://secunia.com/advisories/22229Vendor Advisory
• http://securitytracker.com/id?1011545
• http://securitytracker.com/id?1016975
• http://www-1.ibm.com/support/docview.wss?uid=swg21178665Vendor Advisory
• http://www.osvdb.org/10490
• http://www.securityfocus.com/archive/1/447648/100/0/threaded
• http://www.securityfocus.com/bid/11330
• http://www.vupen.com/english/advisories/2006/3873Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17600
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html
• http://secunia.com/advisories/12703Vendor Advisory
• http://secunia.com/advisories/22229Vendor Advisory
• http://securitytracker.com/id?1011545
• http://securitytracker.com/id?1016975
• http://www-1.ibm.com/support/docview.wss?uid=swg21178665Vendor Advisory
• http://www.osvdb.org/10490
• http://www.securityfocus.com/archive/1/447648/100/0/threaded
• http://www.securityfocus.com/bid/11330
• http://www.vupen.com/english/advisories/2006/3873Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17600

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2472Agnitum Outpost Pro Firewall 2.1 allows remote attackers to …
• CVE-2004-2473wmFrog weather monitor 0.1.6 and other versions before 0.2.0…
• CVE-2004-2474SQL injection vulnerability in PHPNews 1.2.3 allows remote a…
• CVE-2004-2475Cross-site scripting (XSS) vulnerability in Google Toolbar 2…
• CVE-2004-2476Microsoft Internet Explorer 6.0 allows remote attackers to c…
• CVE-2004-2477DiamondCS Process Guard Free 2.000 allows local users to dis…
• CVE-2004-2479Squid Web Proxy Cache 2.5 might allow remote attackers to ob…
• CVE-2004-2480Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to…
• CVE-2004-2481MyProxy 6.58 allows remote authenticated users in the Users …
• CVE-2004-2482Microsoft Outlook 2000 and 2003, when configured to use Micr…
• CVE-2004-2483Kerio WinRoute Firewall before 6.0.9 uses information from P…
• CVE-2004-2484Cross-site scripting (XSS) vulnerability in PHP Gift Registr…