CVE-2007-2440: Medium severity Caucho Technology Resin vulnerability
Published May 16, 2007
·Updated
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.
Affected Software
2 affected components
Caucho Technology Resin<=3.1.0
Caucho Technology Resin<=3.1.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 16, 2007
CVE Published
07:28 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2440?
CVE-2007-2440 has a medium severity rating due to its potential to allow unauthorized access to file contents.
2
How do I fix CVE-2007-2440?
To fix CVE-2007-2440, update to a version of Caucho Resin newer than 3.1.0.
3
What software is affected by CVE-2007-2440?
CVE-2007-2440 affects Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows.
4
What kind of attacks can exploit CVE-2007-2440?
Attackers can exploit CVE-2007-2440 using directory traversal techniques to read sensitive files on the server.
5
Is CVE-2007-2440 present in all versions of Caucho Resin?
No, CVE-2007-2440 is only present in Caucho Resin versions 3.1.0 and earlier.