CVE

Id
58884  
CVE No.
CVE-2012-5641  
Status
Candidate  
Description
Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows remote attackers to read arbitrary files via a .. (dot dot backslash) in the default URI.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602187 58884 CVE-2012-5641 FULLDISC:20130114 CVE-2012-5641 Apache CouchDB Information disclosure via unescaped backslashes in URLs on Windows  View
602188 58884 CVE-2012-5641 URL:http://seclists.org/fulldisclosure/2013/Jan/81  View
602189 58884 CVE-2012-5641 CONFIRM:https://github.com/melkote/mochiweb/commit/ac2bf  View
602190 58884 CVE-2012-5641 CONFIRM:https://github.com/mochi/mochiweb/issues/92  View
602191 58884 CVE-2012-5641 BID:57313  View
602192 58884 CVE-2012-5641 URL:http://www.securityfocus.com/bid/57313  View
602193 58884 CVE-2012-5641 SECUNIA:51765  View
602194 58884 CVE-2012-5641 URL:http://secunia.com/advisories/51765  View
602195 58884 CVE-2012-5641 XF:apache-couchdb-dir-traversal(81240)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20113 JVNDB-2013-001688 Red Hat OpenShift Origin における任意のコマンドを実行される脆弱性 Red Hat OpenShift Origin の node-util/www/html/restorer.php には、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-5646 58884 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001688.html  View