JBoss Java Class DeploymentFileRepository目录遍历漏洞

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

JBoss Group JBoss Web Server 1.0 GA

JBoss Group JBoss Patch

http://jira.jboss.com/jira/browse/ASPATCH-126

来源: BID

名称: 21219

链接:http://www.securityfocus.com/bid/21219

来源: REDHAT

名称: RHSA-2006:0743

链接:http://www.redhat.com/support/errata/RHSA-2006-0743.html

来源: VUPEN

名称: ADV-2006-4724

链接:http://www.frsirt.com/english/advisories/2006/4724

来源: BUGTRAQ

名称: 20061127 SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal

链接:http://www.securityfocus.com/archive/1/archive/1/452830/100/0/threaded

来源: SECTRACK

名称: 1017289

链接:http://securitytracker.com/id?1017289

来源: SECUNIA

名称: 23095

链接:http://secunia.com/advisories/23095

来源: jira.jboss.com

链接:http://jira.jboss.com/jira/browse/JBAS-3861

来源: jira.jboss.com

链接:http://jira.jboss.com/jira/browse/ASPATCH-126

来源: secure-support.novell.com

链接:https://secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.html

来源: BUGTRAQ

名称: 20061128 Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal

链接:http://www.securityfocus.com/archive/1/archive/1/452862/100/100/threaded

来源: OSVDB

名称: 30767

链接:http://www.osvdb.org/30767

来源: SUSE

名称: SUSE-SR:2007:002

链接:http://www.novell.com/linux/security/advisories/2007_02_sr.html

来源: VUPEN

名称: ADV-2008-1155

链接:http://www.frsirt.com/english/advisories/2008/1155/references

来源: VUPEN

名称: ADV-2007-0554

链接:http://www.frsirt.com/english/advisories/2007/0554

来源: VUPEN

名称: ADV-2006-4726

链接:http://www.frsirt.com/english/advisories/2006/4726

来源: SECUNIA

名称: 29726

链接:http://secunia.com/advisories/29726

来源: SECUNIA

名称: 24104

链接:http://secunia.com/advisories/24104

来源: SECUNIA

名称: 23984

链接:http://secunia.com/advisories/23984

来源: HP

名称: HPSBST02318

链接:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402