CVE-2007-2441
First published: Wed May 16 2007(Updated: )
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Caucho Resin | <=3.1.0 | |
| Caucho Resin | <=3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.rapid7.com/advisories/R7-0030.jsp
- http://www.caucho.com/resin-3.1/changes/changes.xtp
- http://www.securitytracker.com/id?1018061
- http://secunia.com/advisories/25286
- http://www.securityfocus.com/bid/23985
- http://osvdb.org/36057
- http://www.vupen.com/english/advisories/2007/1824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34293
Frequently Asked Questions
What is the severity of CVE-2007-2441?
CVE-2007-2441 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2007-2441?
To mitigate CVE-2007-2441, upgrade to a version of Caucho Resin later than 3.1.0.
What systems are affected by CVE-2007-2441?
CVE-2007-2441 affects Caucho Resin Professional 3.1.0 and earlier versions running on Windows.
What information can be leaked due to CVE-2007-2441?
CVE-2007-2441 allows remote attackers to obtain the system path through specific URLs.
Is there any workaround for CVE-2007-2441 if I can't upgrade?
If upgrading is not an option, restrict access to the affected URLs to mitigate the risk of exploitation.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/caucho technology
- canonical/caucho resin
- version/caucho resin/3.1.0