CVE-2006-5750
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application...
CVE-2006-5750 is a high vulnerability (CVSS 7.5) in Jboss Application Server, published November 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.7%, the 96th percentile. Fixed in jbossas 0:4.0.4-1.el4s1.25.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 14.7%EPSS, 96th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:4.0.4-1.el4s1.25jbossas
Description
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jbossasRed Hat:rhel_application_stack:1 | before 0:4.0.4-1.el4s1.25 | 0:4.0.4-1.el4s1.25 |
What each source reports
NVD Score used
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
- Record
CVE-2006-5750- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
- Record
CVE-2006-5750- Updated
- 2026-11-02
EUVDEUVD-2006-5734No score
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
- Record
EUVD-2006-5734- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w88w-qrrp-j36hNo score
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application...
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.
- Record
GHSA-w88w-qrrp-j36h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/23984
vupen.com/english/advisories/2008/1155/references
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01390402
redhat.com/support/errata/RHSA-2006-0743.html
osvdb.org/30767
securityfocus.com/bid/21219
Show 25 moreShow less
jira.jboss.com/jira/browse/ASPATCH-126
secure-support.novell.com/KanisaPlatform/Publishing/719/3024921_f.SAL_Public.html
securitytracker.com/id?1017289
novell.com/linux/security/advisories/2007_02_sr.html
nvd.nist.gov/vuln/detail/CVE-2006-5750
github.com/advisories/GHSA-w88w-qrrp-j36h
access.redhat.com/errata/RHSA-2006:0743
kbase.redhat.com/faq/FAQ_107_9629.shtm
bugzilla.redhat.com/show_bug.cgi?id=215828
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0743.json
cve.org/CVERecord?id=CVE-2006-5750