VulnerabilityModified
CVE-2007-2440
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a ..
MEDIUM 5.0EPSS 3.64%
Does this matter?
Lower severity and a low EPSS score (3.64%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.64% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- caucho technology/resin
- Source
- cve@mitre.org
References
- http://osvdb.org/36058
- http://secunia.com/advisories/25286Patch, Vendor Advisory
- http://www.caucho.com/resin-3.1/changes/changes.xtp
- http://www.rapid7.com/advisories/R7-0029.jspPatch, Vendor Advisory
- http://www.securityfocus.com/bid/23985Exploit, Patch
- http://www.securitytracker.com/id?1018061
- http://www.vupen.com/english/advisories/2007/1824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34296
- http://osvdb.org/36058
- http://secunia.com/advisories/25286Patch, Vendor Advisory
- http://www.caucho.com/resin-3.1/changes/changes.xtp
- http://www.rapid7.com/advisories/R7-0029.jspPatch, Vendor Advisory
- http://www.securityfocus.com/bid/23985Exploit, Patch
- http://www.securitytracker.com/id?1018061
- http://www.vupen.com/english/advisories/2007/1824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34296
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.