Caucho Resin 3.1 Encoded Space %20 Request Path Disclosure
2007-05-15T00:00:00
ID EDB-ID:30037 Type exploitdb Reporter Derek Abdine Modified 2007-05-15T00:00:00
Description
Caucho Resin 3.1 Encoded Space (%20) Request Path Disclosure. CVE-2007-2441. Remote exploit for windows platform
source: http://www.securityfocus.com/bid/23985/info
Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data.
Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks.
Resin 3.1.0 is vulnerable; other versions may also be affected.
NOTE: According to the application's 3.1.1 change log, these issues affect the server only when installed on Microsoft Windows.
http://www.example.com:8080/%20
{"id": "EDB-ID:30037", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Caucho Resin 3.1 Encoded Space %20 Request Path Disclosure", "description": "Caucho Resin 3.1 Encoded Space (%20) Request Path Disclosure. CVE-2007-2441. Remote exploit for windows platform", "published": "2007-05-15T00:00:00", "modified": "2007-05-15T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "href": "https://www.exploit-db.com/exploits/30037/", "reporter": "Derek Abdine", "references": [], "cvelist": ["CVE-2007-2441"], "lastseen": "2016-02-03T11:38:23", "viewCount": 5, "enchantments": {"score": {"value": 5.9, "vector": "NONE", "modified": "2016-02-03T11:38:23", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-2441"]}, {"type": "osvdb", "idList": ["OSVDB:36057"]}], "modified": "2016-02-03T11:38:23", "rev": 2}, "vulnersScore": 5.9}, "sourceHref": "https://www.exploit-db.com/download/30037/", "sourceData": "source: http://www.securityfocus.com/bid/23985/info\r\n\r\nCaucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data.\r\n\r\nAttackers can exploit these issues to access potentially sensitive data that may aid in further attacks.\r\n\r\nResin 3.1.0 is vulnerable; other versions may also be affected.\r\n\r\nNOTE: According to the application's 3.1.1 change log, these issues affect the server only when installed on Microsoft Windows. \r\n\r\nhttp://www.example.com:8080/%20", "osvdbidlist": ["36057"], "immutableFields": []}
