NVD

Id
45888  
Name
CVE-2012-4506  
Description
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2012-10-23  
Seq
2012-4506  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230407 45888 CVE-2012-4506 [oss-security] 20121009 CVE Request: gitolite path traversal vulnerability  View
230408 45888 CVE-2012-4506 [oss-security] 20121009 Re: CVE Request: gitolite path traversal vulnerability  View
230409 45888 CVE-2012-4506 55853  View
230410 45888 CVE-2012-4506 gitolite-security-bypass(79130)  View
230411 45888 CVE-2012-4506 https://github.com/sitaramc/gitolite/commit/f636ce3ba3e340569b26d1e47b9d9b62dd8a3bf2  View
230412 45888 CVE-2012-4506 https://groups.google.com/forum/#!topic/gitolite/K9SnQNhCQ-0/discussion  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29382 JVNDB-2012-005089 gitolite におけるディレクトリトラバーサルの脆弱性 gitolite には、ワイルドカードリポジトリおよび ../(ドットドットスラッシュ) とのパターンマッチングが有効な場合、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-4506 57744 CVE-2012-4506 45888 4.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005089.html 2012-10-10 2012-10-24 View