PT-2012-3041 · Mathopd · Mathopd

Mateusz Goik · Published 2012-02-13 · Updated 2023-02-08 · CVE-2012-1050

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mathopd versions 1.4.x through 1.5.x before 1.5p7

Description A directory traversal issue exists when Mathopd is configured with the * construct for mass virtual hosting, allowing remote attackers to read arbitrary files by sending a crafted Host header.

Recommendations For versions 1.4.x through 1.5.x before 1.5p7, update to version 1.5p7 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2023-1197

CVE-2012-1050

Affected Products

Mathopd

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2012-1050 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1050 · Security Note
• http://mathopd.org/security.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2023-1197 · Vendor Advisory
• http://securitytracker.com/id?1026641 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-02/0025.html · Note
• http://secunia.com/advisories/47908 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2012-1050 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1050 · Note
• http://mail-archive.com/mathopd%40mathopd.org/msg00392.html · Note
• http://osvdb.org/78896 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73049 · Note