CVE-2007-2441

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure2007-05-15 · remote · windows · Verified

Impact

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.

Affected products

References

• NVD record
• CVE.org record
• http://osvdb.org/36057
• http://secunia.com/advisories/25286
• http://www.caucho.com/resin-3.1/changes/changes.xtp
• http://www.rapid7.com/advisories/R7-0030.jsp
• http://www.securityfocus.com/bid/23985
• http://www.securitytracker.com/id?1018061
• http://www.vupen.com/english/advisories/2007/1824
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293
• http://osvdb.org/36057
• http://secunia.com/advisories/25286
• http://www.caucho.com/resin-3.1/changes/changes.xtp
• http://www.rapid7.com/advisories/R7-0030.jsp
• http://www.securityfocus.com/bid/23985
• http://www.securitytracker.com/id?1018061
• http://www.vupen.com/english/advisories/2007/1824
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293