medium5.0Public exploit code
CVE-2006-2437
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file und…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure2006-05-16 · webapps · java · Verified
Impact
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caucho Technology | Resin | Versions 3.0.17, 3.0.18 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html
- http://securityreason.com/securityalert/908
- http://www.securityfocus.com/archive/1/434145
- http://www.securityfocus.com/bid/18007
- http://www.vupen.com/english/advisories/2006/1831
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html
- http://securityreason.com/securityalert/908
- http://www.securityfocus.com/archive/1/434145
- http://www.securityfocus.com/bid/18007
- http://www.vupen.com/english/advisories/2006/1831