CVE-2006-2438

CVE-2006-2438 describes a directory traversal vulnerability in the viewfile servlet of the documentation package (resin-doc) within Caucho Resin versions 3.0.17 and 3.0.18. This flaw allows unauthenticated remote attackers to read arbitrary files located outside the intended web root by manipulating the 'contextpath' parameter. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity, requiring no authentication, and primarily impacting confidentiality by allowing information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.