CVE-2002-2090: Medium severity caucho technology resin vulnerability
Published Dec 31, 2002
·Updated
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
Affected Software
2 affected components
Caucho Technology Resin=2.1.2
Caucho Technology Resin=2.1.1
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Aug 5, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2090?
CVE-2002-2090 is considered a high severity vulnerability due to the potential exposure of sensitive server information.
2
How do I fix CVE-2002-2090?
To fix CVE-2002-2090, upgrade your Caucho Technology Resin server to versions 2.1.3 or later.
3
What versions of Resin are affected by CVE-2002-2090?
CVE-2002-2090 affects Caucho Technology Resin versions 2.1.1 and 2.1.2.
4
What is the main risk associated with CVE-2002-2090?
The main risk associated with CVE-2002-2090 is that remote attackers can gain access to the server's root path.
5
Is there a known exploit for CVE-2002-2090?
Yes, there are known exploits that leverage CVE-2002-2090 to access sensitive information on vulnerable Resin servers.