CVE-2002-1989

Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp.

Scoring

CVSS base score
0.03
EPSS probability
0.66%
Published
2005-07-14
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs