NVD

Id
43986  
Name
CVE-2012-2138  
Description
The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-07-09  
Modified Date
2012-07-10  
Seq
2012-2138  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221071 43986 CVE-2012-2138 [www-announce] 20120706 [SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability  View
221072 43986 CVE-2012-2138 http://svn.apache.org/viewvc?view=revision&revision=1352865  View
221073 43986 CVE-2012-2138 https://issues.apache.org/jira/browse/SLING-2517  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27326 JVNDB-2012-003033 Apache Sling におけるサービス運用妨害 (無限ループ) の脆弱性 Apache Sling の org.apache.sling.servlets.post バンドル内の POST サーブレットの @CopyFrom 操作は、祖先ノードが子孫ノードへコピーされることを制限しないため、サービス運用妨害 (無限ループ) 状態となる脆弱性が存在します。 CVE-2012-2138 55376 CVE-2012-2138 43986 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003033.html 2012-06-06 2012-07-11 View