Description
Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://securityreason.com/securityalert/908 ↗
- http://www.securityfocus.com/archive/1/434145 ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html ↗
- http://www.vupen.com/english/advisories/2006/1831 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26494 ↗
- http://www.securityfocus.com/bid/18007 ↗
- http://securitytracker.com/id?1016110 ↗
- http://secunia.com/advisories/20125 ↗
- http://www.osvdb.org/25571 ↗