CVE-2002-2090

Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp...

CVE-2002-2090

CVE-2002-2090 (Resin) affects Caucho Resin 2.1.1 to 2.1.2. The vulnerability enables an attacker to disclose the server’s root path by sending requests for MS-DOS device names (e.g., lpt9.xtp). OpenVAS and Red Hat entries corroborate an information-disclosure issue in Resin related to DOS device ...

Resin MS-DOS Device Request Path Disclosure

Resin will reveal the physical path of the webroot when asked for a special DOS device, e.g. lpt9.xtp An attacker may use this flaw to gain further knowledge about the remote filesystem layout. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson...