PT-2007-3772 · Caucho · Caucho Resin+1

Published 2007-05-16 · Updated 2017-07-29 · CVE-2007-2441

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Caucho Resin Professional versions 3.1.0 and earlier Caucho Resin versions 3.1.0 and earlier

Description The issue allows remote attackers to obtain the system path via certain URLs associated with deploying web applications or displaying .xtp files.

Recommendations For Caucho Resin Professional versions 3.1.0 and earlier, consider restricting access to the URLs associated with deploying web applications or displaying .xtp files until a fix is available. For Caucho Resin versions 3.1.0 and earlier, consider restricting access to the URLs associated with deploying web applications or displaying .xtp files until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2007-2441

Affected Products

Caucho Resin

Caucho Resin Professional

References · 11

• 🔥 https://exploit-db.com/exploits/30037 · Exploit
• http://rapid7.com/advisories/R7-0030.jsp · Patch
• http://secunia.com/advisories/25286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2441 · Security Note
• http://securitytracker.com/id?1018061 · Patch
• http://caucho.com/resin-3.1/changes/changes.xtp · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293 · Note
• http://osvdb.org/36057 · Note
• http://securityfocus.com/bid/23985 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2441 · Note
• http://vupen.com/english/advisories/2007/1824 · Note