NVD

Id
42185  
Name
CVE-2012-0036  
Description
curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-18  
Published
2012-04-13  
Modified Date
2017-06-14  
Seq
2012-0036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212939 42185 CVE-2012-0036 http://curl.haxx.se/curl-url-sanitize.patch  View
212940 42185 CVE-2012-0036 http://curl.haxx.se/docs/adv_20120124.html  View
212941 42185 CVE-2012-0036 HPSBMU02786  View
212942 42185 CVE-2012-0036 APPLE-SA-2012-05-09-1  View
212943 42185 CVE-2012-0036 http://support.apple.com/kb/HT5281  View
212944 42185 CVE-2012-0036 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
212945 42185 CVE-2012-0036 51665  View
212946 42185 CVE-2012-0036 https://bugzilla.redhat.com/show_bug.cgi?id=773457  View
212947 42185 CVE-2012-0036 https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26361 JVNDB-2012-002068 curl および libcurl におけるデータインジェクション攻撃の脆弱性 curl および libcurl は、URL からパス名を抽出する間、特殊な文字列に対する処理を適切に行わないため、データインジェクション攻撃を行われる脆弱性が存在します。 CVE-2012-0036 53274 CVE-2012-0036 42185 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002068.html 2012-04-13 2015-07-29 View