NVD

Id
44676  
Name
CVE-2012-2999  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-04  
Modified Date
2013-02-06  
Seq
2012-2999  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224221 44676 CVE-2012-2999 http://www.cerberusftp.com/products/releasenotes.html  View
224222 44676 CVE-2012-2999 VU#989684  View
224223 44676 CVE-2012-2999 55788  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29083 JVNDB-2012-004790 Cerberus FTP Server にクロスサイトリクエストフォージェリの脆弱性 Cerberus FTP Server には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2999 56237 CVE-2012-2999 44676 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004790.html 2012-10-05 2012-10-11 View