CVE-2007-2441: Medium severity Caucho Technology Resin vulnerability
Published May 16, 2007
·Updated
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Affected Software
2 affected components
Caucho Technology Resin<=3.1.0
Caucho Technology Resin<=3.1.0
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
May 16, 2007
CVE Published
07:28 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2441?
CVE-2007-2441 is considered a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2007-2441?
To mitigate CVE-2007-2441, upgrade to a version of Caucho Resin later than 3.1.0.
3
What systems are affected by CVE-2007-2441?
CVE-2007-2441 affects Caucho Resin Professional 3.1.0 and earlier versions running on Windows.
4
What information can be leaked due to CVE-2007-2441?
CVE-2007-2441 allows remote attackers to obtain the system path through specific URLs.
5
Is there any workaround for CVE-2007-2441 if I can't upgrade?
If upgrading is not an option, restrict access to the affected URLs to mitigate the risk of exploitation.