NVD

Id
42199  
Name
CVE-2012-0053  
Description
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-01-27  
Modified Date
2016-08-22  
Seq
2012-0053  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213046 42199 CVE-2012-0053 HPSBMU02786  View
213047 42199 CVE-2012-0053 http://httpd.apache.org/security/vulnerabilities_22.html  View
213048 42199 CVE-2012-0053 http://kb.juniper.net/JSA10585  View
213049 42199 CVE-2012-0053 APPLE-SA-2012-09-19-2  View
213050 42199 CVE-2012-0053 openSUSE-SU-2012:0314  View
213051 42199 CVE-2012-0053 SSRT100823  View
213052 42199 CVE-2012-0053 SSRT100852  View
213053 42199 CVE-2012-0053 SSRT101112  View
213054 42199 CVE-2012-0053 RHSA-2012:0128  View
213055 42199 CVE-2012-0053 http://support.apple.com/kb/HT5501  View
213056 42199 CVE-2012-0053 http://svn.apache.org/viewvc?view=revision&revision=1235454  View
213057 42199 CVE-2012-0053 MDVSA-2013:150  View
213058 42199 CVE-2012-0053 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
213059 42199 CVE-2012-0053 http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html  View
213060 42199 CVE-2012-0053 51706  View
213061 42199 CVE-2012-0053 https://bugzilla.redhat.com/show_bug.cgi?id=785069  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25551 JVNDB-2012-001258 Apache HTTP Server の protocol.c における HTTPOnly Cookie の値を取得される脆弱性 Apache HTTP Server の protocol.c は、Bad Request (400) エラー中のヘッダ情報を適切に制限しないため、HTTPOnly Cookie の値を取得される脆弱性が存在します。 CVE-2012-0053 53291 CVE-2012-0053 42199 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001258.html 2012-01-23 2015-01-30 View