Unrated severityNVD Advisory· Published Nov 27, 2006· Updated Apr 23, 2026
CVE-2006-5750
CVE-2006-5750
Description
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
Affected products
12cpe:2.3:a:jboss:jboss_application_server:3.2.5_final:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:jboss:jboss_application_server:3.2.5_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:3.2.6_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:3.2.7_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:3.2.8_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:3.2.8.sp1:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.0_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.1_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.1_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.2_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.3_final:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.4.ga:*:*:*:*:*:*:*
- cpe:2.3:a:jboss:jboss_application_server:4.0.5.ga:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
19- www.redhat.com/support/errata/RHSA-2006-0743.htmlnvdPatch
- www.securityfocus.com/bid/21219nvdPatch
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- jira.jboss.com/jira/browse/ASPATCH-126nvd
- jira.jboss.com/jira/browse/JBAS-3861nvd
- secunia.com/advisories/23095nvd
- secunia.com/advisories/23984nvd
- secunia.com/advisories/24104nvd
- secunia.com/advisories/29726nvd
- securitytracker.com/idnvd
- www.novell.com/linux/security/advisories/2007_02_sr.htmlnvd
- www.osvdb.org/30767nvd
- www.securityfocus.com/archive/1/452830/100/0/threadednvd
- www.securityfocus.com/archive/1/452862/100/100/threadednvd
- www.vupen.com/english/advisories/2006/4724nvd
- www.vupen.com/english/advisories/2006/4726nvd
- www.vupen.com/english/advisories/2007/0554nvd
- www.vupen.com/english/advisories/2008/1155/referencesnvd
- secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.htmlnvd
News mentions
0No linked articles in our index yet.