CVE

Id
58900  
CVE No.
CVE-2012-5657  
Status
Candidate  
Description
The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602352 58900 CVE-2012-5657 MLIST:[oss-security] 20121219 CVE request: information disclosure flaw in php-ZendFramework (ZF2012-05)  View
602353 58900 CVE-2012-5657 URL:http://openwall.com/lists/oss-security/2012/12/20/2  View
602354 58900 CVE-2012-5657 MLIST:[oss-security] 20121219 Re: CVE request: information disclosure flaw in php-ZendFramework (ZF2012-05)  View
602355 58900 CVE-2012-5657 URL:http://openwall.com/lists/oss-security/2012/12/20/4  View
602356 58900 CVE-2012-5657 CONFIRM:http://framework.zend.com/security/advisory/ZF2012-05  View
602357 58900 CVE-2012-5657 DEBIAN:DSA-2602  View
602358 58900 CVE-2012-5657 URL:http://www.debian.org/security/2012/dsa-2602  View
602359 58900 CVE-2012-5657 MANDRIVA:MDVSA-2013:115  View
602360 58900 CVE-2012-5657 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:115  View
602361 58900 CVE-2012-5657 SECUNIA:51583  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30512 JVNDB-2012-006220 x3270 における SSL サーバになりすまされる脆弱性 x3270 は、サーバのホスト名が X.509 証明書のサブジェクトの Common Name (CN) または subjectAltName フィールドのドメイン名と一致することを検証しないため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2012-5662 58900 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006220.html  View