Jetty Cookie Names Session Hijacking Vulnerability

Bugtraq ID:	26695
Class:	Input Validation Error
CVE:	CVE-2007-5614
Remote:	Yes
Local:	No
Published:	Dec 04 2007 12:00AM
Updated:	Apr 13 2015 10:03PM
Credit:	Tomasz Kuczynski reported this issue.
Vulnerable:	Jetty Jetty 6.0.2 Jetty Jetty 6.0.1 Jetty Jetty 5.16 Jetty Jetty 5.15 Jetty Jetty 5.1.12 Jetty Jetty 5.1.11 Jetty Jetty 4.2.27 Jetty Jetty 4.2.24 Jetty Jetty 4.2.19 Jetty Jetty 4.2.18 Jetty Jetty 4.2.17 Jetty Jetty 4.2.16 Jetty Jetty 4.2.15 Jetty Jetty 4.2.14 Jetty Jetty 4.2.12 Jetty Jetty 4.2.11 Jetty Jetty 4.2.9 Jetty Jetty 4.2.7 Jetty Jetty 4.2.6 Jetty Jetty 4.2.5 Jetty Jetty 4.2.4 Jetty Jetty 4.1.1 Jetty Jetty 4.1 .0RC4 Jetty Jetty 4.1 .0 Jetty Jetty 3.1.7 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Jetty Jetty 3.1.6 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 - Microsoft Windows 98 SP1 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 alpha - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Slackware Linux 8.0 - Slackware Linux 7.1 - Sun Solaris 8_x86 - Sun Solaris 8_sparc - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha Jetty Jetty 6.1.5 Jetty Jetty 6.1.4 Jetty Jetty 6.1.3 Jetty Jetty 6.1.2 Jetty Jetty 6.1.1 Jetty Jetty 6.1.0pre3 Jetty Jetty 6.1.0pre2
Not Vulnerable:	Jetty Jetty 6.1.6

Jetty Cookie Names Session Hijacking Vulnerability

Jetty is prone to a vulnerability that allows attackers to hijack browser sessions.

Successful attacks will allow attackers to access potentially sensitive information and perform actions in the guise of legitimate users.

Versions prior to Jetty 6.1.6 are vulnerable.

Jetty Cookie Names Session Hijacking Vulnerability

Attackers can use a browser to exploit this issue. The attacker may need to entice an unsuspecting user to follow a malicious URI.

Jetty Cookie Names Session Hijacking Vulnerability

Solution:
The vendor released Jetty 6.1.6 to address this issue. Please see the references for more information.


Jetty Jetty 6.1.4

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.3

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.1

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.5

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.2

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.0pre2

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.1.0pre3

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 3.1.6

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 3.1.7

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.1 .0RC4

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.1 .0

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.1.1

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.11

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.12

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.14

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.15

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.16

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.17

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.18

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.19

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.24

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.27

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.4

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.5

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.6

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.7

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 4.2.9

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 5.1.11

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 5.1.12

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 5.15

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 5.16

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.0.1

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Jetty 6.0.2

• Jetty jetty-6.1.6.zip
  http://dist.codehaus.org/jetty/jetty-6.1.6/jetty-6.1.6.zip

Jetty Cookie Names Session Hijacking Vulnerability

References:

• Jetty Changelog (Jetty)
  
• Jetty Homepage (Jetty)
  
• VU#438616 Mortbay Jetty fails to properly handle cookies with quotes (US-CERT)