CVE-2007-2441 Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2)....
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caucho technology resin | <= 3.1.0 | No fix listed |
References
- 36057 vdb-entry
- 25286 patch third-party-advisory vendor-advisory
- www.caucho.com patch
- www.rapid7.com patch
- 23985 vdb-entry
- 1018061 patch vdb-entry
- ADV-2007-1824 vdb-entry
- resin-multiple-path-disclosure(34293) vdb-entry