Lucene search

[email protected]CVE-2012-1617

HistorySep 26, 2012 - 12:55 a.m.

CVE-2012-1617

2012-09-2600:55:01

CWE-22

[email protected]

web.nvd.nist.gov

cve-2012-1617

directory traversal vulnerability

osclass

remote attackers

arbitrary files

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

JSON

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a … (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.

Affected configurations

NVD

Node

juan_ramonosclassRange≤2.3.5

juan_ramonosclassMatch1.1

juan_ramonosclassMatch1.1rc

juan_ramonosclassMatch1.2alpha

juan_ramonosclassMatch1.2beta

juan_ramonosclassMatch1.2delta

juan_ramonosclassMatch2.0

juan_ramonosclassMatch2.0rc

juan_ramonosclassMatch2.0.1

juan_ramonosclassMatch2.0.2

juan_ramonosclassMatch2.0.3

juan_ramonosclassMatch2.1

juan_ramonosclassMatch2.1.1

juan_ramonosclassMatch2.2

juan_ramonosclassMatch2.2.1

juan_ramonosclassMatch2.2.2

juan_ramonosclassMatch2.2.3

juan_ramonosclassMatch2.3

juan_ramonosclassMatch2.3.1

juan_ramonosclassMatch2.3.2

juan_ramonosclassMatch2.3.3

juan_ramonosclassMatch2.3.4

CPENameOperatorVersion
juan_ramon:osclassjuan ramon osclassle2.3.5
juan_ramon:osclassjuan ramon osclasseq1.1
juan_ramon:osclassjuan ramon osclasseq1.2
juan_ramon:osclassjuan ramon osclasseq2.0
juan_ramon:osclassjuan ramon osclasseq2.0.1
juan_ramon:osclassjuan ramon osclasseq2.0.2
juan_ramon:osclassjuan ramon osclasseq2.0.3
juan_ramon:osclassjuan ramon osclasseq2.1
juan_ramon:osclassjuan ramon osclasseq2.1.1
juan_ramon:osclassjuan ramon osclasseq2.2

CPE	Name	Operator	Version
juan_ramon:osclass	juan ramon osclass	le	2.3.5
juan_ramon:osclass	juan ramon osclass	eq	1.1
juan_ramon:osclass	juan ramon osclass	eq	1.2
juan_ramon:osclass	juan ramon osclass	eq	2.0
juan_ramon:osclass	juan ramon osclass	eq	2.0.1
juan_ramon:osclass	juan ramon osclass	eq	2.0.2
juan_ramon:osclass	juan ramon osclass	eq	2.0.3
juan_ramon:osclass	juan ramon osclass	eq	2.1
juan_ramon:osclass	juan ramon osclass	eq	2.1.1
juan_ramon:osclass	juan ramon osclass	eq	2.2

Rows per page:

1-10 of 181

References

archives.neohapsis.com/archives/bugtraq/2012-03/0024.html

osclass.org/2012/03/05/osclass-2-3-6/

secunia.com/advisories/48284

www.codseq.it/advisories/osclass_directory_traversal_vulnerability

www.openwall.com/lists/oss-security/2012/04/02/1

www.openwall.com/lists/oss-security/2012/04/02/6

www.openwall.com/lists/oss-security/2012/04/03/1

www.openwall.com/lists/oss-security/2012/04/04/7

www.securityfocus.com/bid/52336

exchange.xforce.ibmcloud.com/vulnerabilities/73754

exchange.xforce.ibmcloud.com/vulnerabilities/73755

github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b

github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a

github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2012-1617

prion1 nvd1 cvelist1