NVD

Id
44186  
Name
CVE-2012-2374  
Description
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-05-23  
Modified Date
2012-09-04  
Seq
2012-2374  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221908 44186 CVE-2012-2374 [oss-security] 20120518 Re: CVE Request -- Tornado (python-tornado): Tornado v2.2.1 tornado.web.RequestHandler.set_header() fix to prevent header injection  View
221909 44186 CVE-2012-2374 [oss-security] 20120518 CVE Request -- Tornado (python-tornado): Tornado v2.2.1 tornado.web.RequestHandler.set_header() fix to prevent header injection  View
221910 44186 CVE-2012-2374 53612  View
221911 44186 CVE-2012-2374 http://www.tornadoweb.org/documentation/releases/v2.2.1.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26807 JVNDB-2012-002514 Tornado の tornado.web.RequestHandler.set_header 関数における CRLF インジェクションの脆弱性 Tornado の tornado.web.RequestHandler.set_header 関数には、CRLF インジェクションの脆弱性が存在します。 CVE-2012-2374 55612 CVE-2012-2374 44186 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002514.html 2012-05-23 2012-05-25 View