CVE-2006-5750

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-27 · updated 2026-06-16

Description

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.

Affected products

Jboss Application Server: 3.2.5_final, 3.2.6_final, 3.2.7_final, 3.2.8.sp1, 3.2.8_final, 4.0.0_final (+6)

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402
http://jira.jboss.com/jira/browse/ASPATCH-126
http://jira.jboss.com/jira/browse/JBAS-3861
http://secunia.com/advisories/23095
http://secunia.com/advisories/23984
http://secunia.com/advisories/24104
http://secunia.com/advisories/29726
http://securitytracker.com/id?1017289
http://www.novell.com/linux/security/advisories/2007_02_sr.html
http://www.osvdb.org/30767
http://www.redhat.com/support/errata/RHSA-2006-0743.html
http://www.securityfocus.com/archive/1/452830/100/0/threaded

Get alerted when CVE-2006-5750 or the next vulnerability affects your stack