Description
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
References
- 5252 vdb-entry
- 20020717 KPMG-2002033: Resin DOS device path disclosure mailing-list