CVE-2006-1953

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" encoded drive letter in a URL...

CVE-2006-1953

CVE-2006-1953 affects Caucho Resin on Windows, where directory traversal via encoded drive letter (for example http://host:8080/C:%5C/) allows remote attackers to read arbitrary files. Affected versions: Resin 3.0.17 and 3.0.18 for Windows (not vulnerable: 3.0.16 and earlier; 3.0.19 fixes introdu...

Caucho Resin Windows Directory Traversal Vulnerability

Rapid7 Security Advisory Visit http://www.rapid7.com/ to download NeXpose, SC Magazine Winner of Best Vulnerability Management product. Rapid7 Advisory R7-0024 Caucho Resin Windows Directory Traversal Vulnerability Published: May 16, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0024.htm...

Caucho Resin application server directory traversal

There are few way to access content behind web root directory...

ScanAlert Security Advisory

ScanAlert Security Advisory http://www.scanalert.com Caucho Resin Multiple Vulnerabilities - Arbitrary File Access & Information Disclosure Date: 5/16/06 Vendor: Caucho Package: Resin Version: 3.0.17 and 3.0.18 – Vendor Confirmed Credit: ScanAlert’s Security and Enterprise Services Teams. Risk:...

Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure

source: https://www.securityfocus.com/bid/18007/info Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from t...

Resin < 3.0.19 Directory Traversal and Path Disclosure Vulnerabilities

Binary data 3621.prm...

Caucho Resin 3.0.173.0.18 - Viewfile Information Disclosure

Caucho Resin 3.0.173.0.18 - Viewfile Information Disclosure source: https://www.securityfocus.com/bid/18007/info Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

Caucho Resin '/caucho-status' Accessible (HTTP)

The remote Caucho Resin installation is exposing the /caucho-status endpoint. SPDX-FileCopyrightText: 2003 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Resin DOS device path disclosure

Resin will reveal the physical path of the webroot when asked for a special DOS device, e.g. lpt9.xtp An attacker may use this flaw to gain further knowledge about the remote filesystem layout. OpenVAS Vulnerability Test $Id: resinpathdisclosure.nasl 6702 2017-07-12 13:49:41Z cfischer $...

Caucho Resin <= 2.1.2 Information Disclosure Vulnerability

Caucho Resin will reveal the physical path of the webroot when asked for a special DOS device, e.g. lpt9.xtp. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Resin /caucho-status accessible

Requesting the URI /caucho-status gives information about the currently running Resin java servlet container. OpenVAS Vulnerability Test $Id: resinserverstatus.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Resin /caucho-status accessible Authors: Vincent Renardias Copyright: Copyright C 20...

CVE-2002-2090

CVE-2002-2090 (Resin) affects Caucho Resin 2.1.1 to 2.1.2. The vulnerability enables an attacker to disclose the server’s root path by sending requests for MS-DOS device names (e.g., lpt9.xtp). OpenVAS and Red Hat entries corroborate an information-disclosure issue in Resin related to DOS device ...

CVE-2002-2090

Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp...

CVE-2002-1990

Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet...

CVE-2002-1987

Directory traversal vulnerability in viewsource.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a ".." backslash dot dot...

CVE-2002-1988

CVE-2002-1988 affects Resin 2.1.1. The vulnerability allows remote attackers to cause a denial of service through a request containing long variables targeting non-existent resources, leading to memory consumption and a potential hang of the server. Root cause is tied to processing lengthy query/...

CVE-2002-1989

Resin 2.1.1 is affected by CVE-2002-1989. The vulnerability allows remote attackers to cause a denial of service by issuing multiple URL requests that include the DOS name “CON” and a registered file extension such as .jsp or .xtp, leading to thread and connection consumption. The available docum...

CVE-2002-1987

The CVE-2002-1987 entry concerns Resin 2.1.2 where a directory traversal flaw in view_source.jsp allows remote attackers to read arbitrary files via a .. sequence. Affected component is Resin 2.1.2; root cause is input path traversal in the JSP renderer. Impact is partial confidentiality (read ac...

CVE-2002-1990

Vulnerability summary: CVE-2002-1990 affects Resin 2.0.5 through 2.1.2. The issue allows remote attackers to reveal physical path information by requesting the example Java class HelloServlet, enabling partial information disclosure. The available sources (NVD/Red Hat/CVE listings) confirm the af...