CVE-2007-2441

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.

Link	Resource
http://www.rapid7.com/advisories/R7-0030.jsp	Patch
http://www.caucho.com/resin-3.1/changes/changes.xtp	Patch
http://www.securitytracker.com/id?1018061	Patch
http://secunia.com/advisories/25286	Patch Vendor Advisory
http://www.securityfocus.com/bid/23985
http://osvdb.org/36057
http://www.vupen.com/english/advisories/2007/1824
https://exchange.xforce.ibmcloud.com/vulnerabilities/34293

Configuration 1

cpe:2.3:a:caucho_technology:resin:*:*:windows:*:*:*:*:* cpe:2.3:a:caucho_technology:resin:*:*:professional_windows:*:*:*:*:*

---

Published : 2007-05-16 07:28

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-2441

Mitre link : CVE-2007-2441

No products.

NVD-CWE-Other