CVE-2006-1953: High severity Caucho Technology Resin vulnerability
Published May 17, 2006
·Updated
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
Affected Software
2 affected components
Caucho Technology Resin=3.0.17
Caucho Technology Resin=3.0.18
Remediation
Patch Available
Event History
May 17, 2006
CVE Published
10:06 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1953?
CVE-2006-1953 has a moderate severity rating due to its ability to allow unauthorized file reading.
2
How do I fix CVE-2006-1953?
To fix CVE-2006-1953, you should upgrade to a patched version of Caucho Resin beyond 3.0.18.
3
What software versions are affected by CVE-2006-1953?
CVE-2006-1953 affects Caucho Resin versions 3.0.17 and 3.0.18 for Windows.
4
Who can exploit CVE-2006-1953?
Any remote attacker can exploit CVE-2006-1953 if vulnerable servers are accessible.
5
What type of vulnerability is CVE-2006-1953?
CVE-2006-1953 is classified as a directory traversal vulnerability.