CVE-2007-2440

MEDIUM 5.0CVE-2007-2440 · Published 16/05/2007 · updated 16/06/2026

In short

CVE-2007-2440 is a MEDIUM (CVSS 5.0) vulnerability affecting resin (caucho technology).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
resin caucho_technology	`≤ 3.1.0`	No fix yet

Description

Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.

References

osvdb.org/36058
secunia.com/advisories/25286 · Patch
caucho.com/resin-3.1/changes/changes.xtp
rapid7.com/advisories/R7-0029.jsp · Patch
securityfocus.com/bid/23985 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2007/1824
exchange.xforce.ibmcloud.com/vulnerabilities/34296

More vulnerabilities in resin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

resin

caucho_technology

≤ 3.1.0

No fix yet

More vulnerabilities in resin

See all →