CVE-2000-1224

Caucho Technology Resin 1.2 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-1224. PoCs published by benjurry.

AI-analyzed exploit summary This is a writeup describing a path traversal vulnerability in Resin and ServletExec that allows disclosure of JSP source code by appending specific characters to the URL. The vulnerability is platform-dependent and affects Apache (Win32), Resin Web Server, and IIS 5.

Description

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.

Exploits (1)

exploitdb WRITEUP VERIFIED
by benjurry · textremotejsp
https://www.exploit-db.com/exploits/20429

This is a writeup describing a path traversal vulnerability in Resin and ServletExec that allows disclosure of JSP source code by appending specific characters to the URL. The vulnerability is platform-dependent and affects Apache (Win32), Resin Web Server, and IIS 5.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Resin, ServletExec
No auth needed
Prerequisites: Access to the target web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1986
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/146770
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=97502269408279&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/5568

Scores

EPSS 0.0286
EPSS Percentile 85.0%

Details

Status published
Products (2)
caucho_technology/resin 1.1.5
caucho_technology/resin 1.2
Published Nov 23, 2000
Tracked Since Feb 18, 2026