CVE-2006-1953

2006-05-1710:06:00

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

80.6%

JSON

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a “C:%5C” (encoded drive letter) in a URL.

Affected configurations

Nvd

Node

caucho_technologyresinMatch3.0.17windows

caucho_technologyresinMatch3.0.18windows

VendorProductVersionCPE
caucho_technologyresin3.0.17cpe:2.3:a:caucho_technology:resin:3.0.17:*:windows:*:*:*:*:*
caucho_technologyresin3.0.18cpe:2.3:a:caucho_technology:resin:3.0.18:*:windows:*:*:*:*:*

Vendor	Product	Version	CPE
caucho_technology	resin	3.0.17	cpe:2.3:a:caucho_technology:resin:3.0.17::windows:::::
caucho_technology	resin	3.0.18	cpe:2.3:a:caucho_technology:resin:3.0.18::windows:::::