CVE-2007-2441

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.

• http://osvdb.org/36057
• http://secunia.com/advisories/25286Patch, Vendor Advisory
• http://www.caucho.com/resin-3.1/changes/changes.xtpPatch
• http://www.rapid7.com/advisories/R7-0030.jspPatch
• http://www.securityfocus.com/bid/23985
• http://www.securitytracker.com/id?1018061Patch
• http://www.vupen.com/english/advisories/2007/1824
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293
• http://osvdb.org/36057
• http://secunia.com/advisories/25286Patch, Vendor Advisory
• http://www.caucho.com/resin-3.1/changes/changes.xtpPatch
• http://www.rapid7.com/advisories/R7-0030.jspPatch
• http://www.securityfocus.com/bid/23985
• http://www.securitytracker.com/id?1018061Patch
• http://www.vupen.com/english/advisories/2007/1824
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34293

Published

May 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2435Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier,…
• CVE-2007-2436Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-2437The X render (Xrender) extension in X.org X Window System 7.…
• CVE-2007-2438The sandbox for vim allows dangerous functions such as (1) w…
• CVE-2007-2439Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and e…
• CVE-2007-2440Directory traversal vulnerability in Caucho Resin Profession…
• CVE-2007-2442The gssrpc__svcauth_gssapi function in the RPC library in MI…
• CVE-2007-2443Integer signedness error in the gssrpc__svcauth_unix functio…
• CVE-2007-2444Logic error in the SID/Name translation functionality in smb…
• CVE-2007-2445The png_handle_tRNS function in pngrutil.c in libpng before …
• CVE-2007-2446Multiple heap-based buffer overflows in the NDR parsing in s…
• CVE-2007-2447The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.…