Lucene search

RedhatCVE-2012-2301

HistoryNov 16, 2014 - 2:59 a.m.

CVE-2012-2301

2014-11-1602:59:00

CWE-94

redhat

web.nvd.nist.gov

ubercart

drupal

remote code execution

cve-2012-2301

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.005

Percentile

77.1%

JSON

The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the “administer product classes” permission to execute arbitrary PHP code via unspecified vectors.

Affected configurations

Nvd

Node

ubercartubercartMatch6.x-2.0drupal

ubercartubercartMatch6.x-2.1drupal

ubercartubercartMatch6.x-2.2drupal

ubercartubercartMatch6.x-2.3drupal

ubercartubercartMatch6.x-2.4drupal

ubercartubercartMatch6.x-2.6drupal

ubercartubercartMatch6.x-2.7drupal

VendorProductVersionCPE
ubercartubercart6.x-2.0cpe:2.3:a:ubercart:ubercart:6.x-2.0:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.1cpe:2.3:a:ubercart:ubercart:6.x-2.1:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.2cpe:2.3:a:ubercart:ubercart:6.x-2.2:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.3cpe:2.3:a:ubercart:ubercart:6.x-2.3:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.4cpe:2.3:a:ubercart:ubercart:6.x-2.4:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.6cpe:2.3:a:ubercart:ubercart:6.x-2.6:*:*:*:*:drupal:*:*
ubercartubercart6.x-2.7cpe:2.3:a:ubercart:ubercart:6.x-2.7:*:*:*:*:drupal:*:*

Vendor	Product	Version	CPE
ubercart	ubercart	6.x-2.0	cpe:2.3:a:ubercart:ubercart:6.x-2.0:::::drupal::
ubercart	ubercart	6.x-2.1	cpe:2.3:a:ubercart:ubercart:6.x-2.1:::::drupal::
ubercart	ubercart	6.x-2.2	cpe:2.3:a:ubercart:ubercart:6.x-2.2:::::drupal::
ubercart	ubercart	6.x-2.3	cpe:2.3:a:ubercart:ubercart:6.x-2.3:::::drupal::
ubercart	ubercart	6.x-2.4	cpe:2.3:a:ubercart:ubercart:6.x-2.4:::::drupal::
ubercart	ubercart	6.x-2.6	cpe:2.3:a:ubercart:ubercart:6.x-2.6:::::drupal::
ubercart	ubercart	6.x-2.7	cpe:2.3:a:ubercart:ubercart:6.x-2.7:::::drupal::

References

drupal.org/node/1547506

drupal.org/node/1547508

drupal.org/node/1547674

secunia.com/advisories/48935

www.openwall.com/lists/oss-security/2012/05/03/1

www.openwall.com/lists/oss-security/2012/05/03/2

www.securityfocus.com/bid/53251

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.005

Percentile

77.1%

JSON

Related for CVE-2012-2301