5
CVSSv2

CVE-2001-0304

Published: 03/05/2001 Updated: 18/10/2016
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote malicious users to read arbitrary files via a "\.." (dot dot) in a URL request.

Vulnerable Product Search on Vulmon Subscribe to Product

caucho technology resin 1.2.2

Exploits

source: wwwsecurityfocuscom/bid/2384/info It is possible for a remote user to gain read access to directories and files outside the root directory of a machine running Resin Requesting a specially crafted URL composed of '/' or '/' sequences will disclose an arbitrary directory target/\/readmetxt ...