Description
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
References
- 18005 vdb-entry
- 20060516 Caucho Resin Windows Directory Traversal Vulnerability mailing-list
- ADV-2006-1831 vdb-entry
- resin-webserver-directory-traversal(26478) vdb-entry
- http://www.rapid7.com/advisories/R7-0024.html
- 1016109 vdb-entry
- 25570 vdb-entry
- 904 third-party-advisory
- 20125 third-party-advisory
- 20060516 Caucho Resin Windows Directory Traversal Vulnerability mailing-list