PT-2007-3772 · Caucho · Caucho Resin+1

Publicado 2007-05-16 · Atualizado 2017-07-29 · CVE-2007-2441

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Caucho Resin Professional versions 3.1.0 and earlier Caucho Resin versions 3.1.0 and earlier

Description The issue allows remote attackers to obtain the system path via certain URLs associated with deploying web applications or displaying .xtp files.

Recommendations For Caucho Resin Professional versions 3.1.0 and earlier, consider restricting access to the URLs associated with deploying web applications or displaying .xtp files until a fix is available. For Caucho Resin versions 3.1.0 and earlier, consider restricting access to the URLs associated with deploying web applications or displaying .xtp files until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2441

Produtos afetados

Caucho Resin

Caucho Resin Professional

Referências · 11

• 🔥 https://exploit-db.com/exploits/30037 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293 · Nota
• http://rapid7.com/advisories/R7-0030.jsp · Correção
• http://osvdb.org/36057 · Nota
• http://securityfocus.com/bid/23985 · Nota
• http://secunia.com/advisories/25286 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2441 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2441 · Nota
• http://vupen.com/english/advisories/2007/1824 · Nota
• http://securitytracker.com/id?1018061 · Correção
• http://caucho.com/resin-3.1/changes/changes.xtp · Correção