PT-2012-3041 · Mathopd · Mathopd

Mateusz Goik · Publicado 2012-02-13 · Atualizado 2023-02-08 · CVE-2012-1050

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mathopd versions 1.4.x through 1.5.x before 1.5p7

Description A directory traversal issue exists when Mathopd is configured with the * construct for mass virtual hosting, allowing remote attackers to read arbitrary files by sending a crafted Host header.

Recommendations For versions 1.4.x through 1.5.x before 1.5p7, update to version 1.5p7 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2023-1197

CVE-2012-1050

Produtos afetados

Mathopd

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2012-1050 · Nota de Segurança
• http://securitytracker.com/id?1026641 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-02/0025.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1050 · Nota de Segurança
• http://secunia.com/advisories/47908 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2012-1050 · Nota
• http://mathopd.org/security.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1050 · Nota
• https://errata.altlinux.org/ALT-PU-2023-1197 · Aviso do Fabricante
• http://mail-archive.com/mathopd%40mathopd.org/msg00392.html · Nota
• http://osvdb.org/78896 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73049 · Nota