CVE-2007-2440 Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing...
MediumCVSS 5.0
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caucho technology resin | <= 3.1.0 | No fix listed |
References
- 36058 vdb-entry
- 25286 patch third-party-advisory vendor-advisory
- www.caucho.com
- www.rapid7.com patch vendor-advisory
- 23985 exploit patch vdb-entry
- 1018061 vdb-entry
- ADV-2007-1824 vdb-entry
- resin-webinf-directory-traversal(34296) vdb-entry