First published: Wed May 17 2006(Updated: )
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Caucho Resin | =3.0.17 | |
Caucho Resin | =3.0.18 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-1953 has a moderate severity rating due to its ability to allow unauthorized file reading.
To fix CVE-2006-1953, you should upgrade to a patched version of Caucho Resin beyond 3.0.18.
CVE-2006-1953 affects Caucho Resin versions 3.0.17 and 3.0.18 for Windows.
Any remote attacker can exploit CVE-2006-1953 if vulnerable servers are accessible.
CVE-2006-1953 is classified as a directory traversal vulnerability.