CVE:CVE-2007-2688
CNNVD:CNNVD-200705-315
Resin是一款由Caucho Technology开发的WEB服务器，可使用在Microsoft Windows操作系统下。
Resin for Windows实现上存在多个漏洞，远程攻击者可能利用此漏洞非授权获取敏感信息。
Resin没有正确过滤通过URL传送的输入，允许远程攻击者通过在URL中提供有任意扩展名的DOS设备文件名从系统上的任意COM或LPT设备读取连续的数据流、通过目录遍历攻击泄露Web应用的WEB-INF目录中的文件内容，或通过包含有特殊字符的URL泄露到Caucho Resin服务器的完整系统路径。
solution:Upgrade cisco ips_sensor_software to a higher version than 4.0,5.0(1,5.0(2,5.0(6p1,5.1(1,5.1(1a,5.1(1b,5.1(1c,5.1(1d,5.1(1e,5.1(p1,and avoid the version 4.0,5.0(1),5.0(2),5.0(6)p1,5.1(1),5.1(1a),5.1(1b),5.1(1c),5.1(1d),5.1(1e),5.1(p1); Upgrade cisco ios to a higher version than 10.0,11.1cc,11.3,12.0,12.0s,12.0st,12.0t,12.1,12.1e,12.1t,12.2,12.2t,and avoid the version 10.0,11.1cc,11.3,12.0,12.0s,12.0st,12.0t,12.1,12.1e,12.1t,12.2,12.2t