{"metadata": {"vulnerability": "cve-2009-5047", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2011-01-14T00:00:00Z", "date_only": false, "value": "2011-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2009-5047", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-11-15T15:47:52Z", "date_only": false, "value": "2019-11-15T15:47:52.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2009-5047", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-11-15T16:15:00Z", "date_only": false, "value": "2019-11-15T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M2FQ-JGHC-8C75", "record": "GHSA-M2FQ-JGHC-8C75", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-11-15T16:15:00Z", "date_only": false, "value": "2019-11-15T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2009-5047", "record": "GSD-2009-5047", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-11-15T16:15:09.987Z", "date_only": false, "value": "2019-11-15T16:15:09.987", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2009-5047", "record": "FKIE_CVE-2009-5047", "field": "published"}, {"timestamp": "2019-11-15T18:28:21Z", "date_only": false, "value": "2019-11-15T18:28:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/8150", "record": "CVE-2009-5047", "field": "creation_timestamp", "uuid": "44d34639-f751-4d22-a07a-9d2c92713a5e", "content": "ATENTION\u203c New - CVE-2009-5047\n\nJetty 6.x before 6.1.22 suffers from an escape sequence injection vulnerability from two different vectors: 1) \"Cookie Dump Servlet\" and 2) Http Content-Length header. 1) A POST request to the form at \"/test/cookie/\" with the \"Age\" parameter set to a string throws a \"java.lang.NumberFormatException\" which reflects binary characters including ESC. These characters could be used to execute arbitrary commands or buffer dumps in the terminal. 2) The same attack in 1) can be exploited by requesting a page using an HTTP request \"Content-Length\" header set to a letteral string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/8150"}, {"timestamp": "2019-11-20T00:00:00Z", "date_only": true, "value": "2019-11-20", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-42377", "record": "CNVD-2019-42377", "field": "submitTime"}, {"timestamp": "2019-11-21T18:27:19Z", "date_only": false, "value": "2019-11-21T18:27:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/8256", "record": "CVE-2009-5047", "field": "creation_timestamp", "uuid": "57191070-4852-4ecb-aee7-c67b16121913", "content": "ATENTION\u203c New - CVE-2009-5047 (debian_linux, jetty)\n\nJetty 6.x before 6.1.22 suffers from an escape sequence injection vulnerability from two different vectors: 1) \"Cookie Dump Servlet\" and 2) Http Content-Length header. 1) A POST request to the form at \"/test/cookie/\" with the \"Age\" parameter set to a string throws a \"java.lang.NumberFormatException\" which reflects binary characters including ESC. These characters could be used to execute arbitrary commands or buffer dumps in the terminal. 2) The same attack in 1) can be exploited by requesting a page using an HTTP request \"Content-Length\" header set to a letteral string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/8256"}, {"timestamp": "2019-11-21T18:51:36Z", "date_only": false, "value": "2019-11-21T18:51:36.000Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "cve-2009-5047", "field": "cveMetadata.dateRejected"}, {"timestamp": "2019-11-21T19:15:00Z", "date_only": false, "value": "2019-11-21T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2009-5047", "record": "GSD-2009-5047", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-11-26T00:00:00Z", "date_only": true, "value": "2019-11-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-42377", "record": "CNVD-2019-42377", "field": "openTime"}, {"timestamp": "2022-04-21T01:54:05Z", "date_only": false, "value": "2022-04-21T01:54:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M2FQ-JGHC-8C75", "record": "GHSA-M2FQ-JGHC-8C75", "field": "published"}, {"timestamp": "2022-04-21T01:54:05Z", "date_only": false, "value": "2022-04-21T01:54:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M2FQ-JGHC-8C75", "record": "GHSA-M2FQ-JGHC-8C75", "field": "modified"}, {"timestamp": "2022-09-29T01:35:09Z", "date_only": false, "value": "2022-09-29T01:35:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2009-5047", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2022-09-29T01:35:09Z", "date_only": false, "value": "2022-09-29T01:35:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2009-5047", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-07T02:04:55.090Z", "date_only": false, "value": "2023-11-07T02:04:55.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2009-5047", "record": "FKIE_CVE-2009-5047", "field": "lastModified"}, {"timestamp": "2023-12-13T01:19:48.756Z", "date_only": false, "value": "2023-12-13T01:19:48.756803Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2009-5047", "record": "GSD-2009-5047", "field": "gsd.osvSchema.modified"}]}