CVE-2006-1953

🗓️ 17 May 2006 10:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" in a URL

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Resin < 3.0.19 Directory Traversal and Path Disclosure Vulnerabilities	16 May 200600:00	–	nessus
Tenable Nessus	Resin for Windows Encoded URI Traversal Arbitrary File Access	27 May 200600:00	–	nessus
Cvelist	CVE-2006-1953	17 May 200610:00	–	cvelist
EUVD	EUVD-2006-1953	7 Oct 202500:30	–	euvd
NVD	CVE-2006-1953	17 May 200610:06	–	nvd
Packet Storm	Rapid7 Security Advisory 24	22 May 200600:00	–	packetstorm
Prion	Directory traversal	17 May 200610:06	–	prion
securityvulns	Caucho Resin Windows Directory Traversal Vulnerability	17 May 200600:00	–	securityvulns

NVD

Node

caucho_technology resinMatch3.0.17windows

caucho_technology resinMatch3.0.18windows

Source	Link
securitytracker	www.securitytracker.com/id
securityreason	www.securityreason.com/securityalert/904
secunia	www.secunia.com/advisories/20125
osvdb	www.osvdb.org/25570
vupen	www.vupen.com/english/advisories/2006/1831
archives	www.archives.neohapsis.com/archives/vulnwatch/2006-q2/0026.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/26478
securityfocus	www.securityfocus.com/bid/18005
securityfocus	www.securityfocus.com/archive/1/434150/100/0/threaded
rapid7	www.rapid7.com/advisories/R7-0024.html

Parameter	Position	Path	Description	CWE
C:%5C/	path	/C:%5C/	Directory traversal vulnerability allowing remote unauthenticated users to download arbitrary files via encoded drive letter in the URL (Windows Resin on affected versions).	CWE-22

16 Jun 2026 22:24Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.8

EPSS0.02716