Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Caucho Technology Resin Server设备名远程路径泄露漏洞
Vulnerability Description
Resin是一款由Caucho Technology开发的WEB浏览器，可使用在Microsoft Windows操作系统下。 Resin对用户提交的MS-DOS设备名请求缺少正确的处理，远程攻击者可以利用这个漏洞获得Resin WEBROOT安装目录绝对路径信息。 攻击者可以通过请求部分MS-DOS设备，如lpt9.xtp，可导致Resin返回包含WEBROOT安装目录绝对路径信息给攻击者。攻击者可以利用这些信息进一步对系统进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A