CVE:CVE-2006-5750
CNNVD:CNNVD-200611-435
JBoss Application Server (jbossas)中的DeploymentFileRepository类存在目录遍历漏洞，远程认证用户可以通过和控制台管理器相关的未明向量，读取或修改任意文件并可能执行任意代码。
solution:Upgrade jboss jboss_application_server to a higher version than 3.2.5_final,3.2.6_final,3.2.7_final,3.2.8.sp1,3.2.8_final,4.0.0_final,4.0.1_final,4.0.1_sp1,4.0.2_final,4.0.3_final,4.0.4.ga,4.0.5.ga,and avoid the version 3.2.5_final,3.2.6_final,3.2.7_final,3.2.8.sp1,3.2.8_final,4.0.0_final,4.0.1_final,4.0.1_sp1,4.0.2_final,4.0.3_final,4.0.4.ga,4.0.5.ga