Resin Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...

CVE-2001-0304

Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a ".." dot dot in a URL request...

CVE-2001-0304

CVE-2001-0304 affects Caucho Resin 1.2.2 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files by sending a URL containing a ..? path component. The issue arises from handling of dot-dot sequences in requests, enabling potential exposure of sensitive file...