Description
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
References
- 36059 vdb-entry
- resin-dosdevice-information-disclosure(34301) vdb-entry
- 1018061 vdb-entry
- 25286 third-party-advisory
- ADV-2007-1824 vdb-entry
- http://www.rapid7.com/advisories/R7-0028.jsp
- http://www.caucho.com/resin-3.1/changes/changes.xtp