CVE-2014-2966

Description

References

• caucho.com/products/resin/download · Patch
• kb.cert.org/vuls/id/162308 · Third Party Advisory

More vulnerabilities in resin

• CVE-2021-44138HIGH 7.5There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read…
• CVE-2012-2969MEDIUM 6.4Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for cr…
• CVE-2012-2968MEDIUM 5.0Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbit…
• CVE-2012-2967HIGH 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons…
• CVE-2012-2966HIGH 7.5Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, w…