NVD

Id
44648  
Name
CVE-2012-2965  
Description
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-12  
Modified Date
2012-09-04  
Seq
2012-2965  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224133 44648 CVE-2012-2965 http://caucho.com/resin-4.0/changes/changes.xtp  View
224134 44648 CVE-2012-2965 http://en.securitylab.ru/lab/  View
224135 44648 CVE-2012-2965 http://en.securitylab.ru/lab/PT-2012-05  View
224136 44648 CVE-2012-2965 VU#309979  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27837 JVNDB-2012-003544 Resin に同梱されている Caucho Quercus における脆弱性 Resin に同梱されている Caucho Quercus は、変数名に含まれる不特定の文字を適切に処理しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2012-2965 56203 CVE-2012-2965 44648 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003544.html 2012-08-12 2012-08-14 View