CVE-2014-2966

概要

参考情報

• caucho.com/products/resin/download · Patch
• kb.cert.org/vuls/id/162308 · Third Party Advisory

resin のその他の脆弱性

• CVE-2021-44138高 7.5There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read…
• CVE-2012-2969中 6.4Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for cr…
• CVE-2012-2968中 5.0Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbit…
• CVE-2012-2967高 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons…
• CVE-2012-2966高 7.5Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, w…