Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-1989
CVE-2002-1989
Description
Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp.
Affected products
2cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*
- (no CPE)range: <=2.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.