CVE-2006-2437 : The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers

The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.

Published 2006-05-17 10:06:00

Updated 2011-03-08 02:36:13

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-2437

EPSS FAQ

3.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-2437

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

Products affected by CVE-2006-2437

Caucho Technology » Resin » Version: 3.0.18
cpe:2.3:a:caucho_technology:resin:3.0.18:*:*:*:*:*:*:*
Matching versions
Caucho Technology » Resin » Version: 3.0.17
cpe:2.3:a:caucho_technology:resin:3.0.17:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-2437

Exploit prediction scoring system (EPSS) score for CVE-2006-2437

CVSS scores for CVE-2006-2437

References for CVE-2006-2437

Products affected by CVE-2006-2437