Lucene search

[email protected]NVD:CVE-2012-4465

HistoryOct 10, 2012 - 6:55 p.m.

CVE-2012-4465

2012-10-1018:55:05

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.048

Percentile

92.7%

JSON

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the “Author” field in a commit.

Affected configurations

Nvd

Node

lars_hjemlicgitRange≤0.9.0.3

lars_hjemlicgitMatch0.1

lars_hjemlicgitMatch0.2

lars_hjemlicgitMatch0.3

lars_hjemlicgitMatch0.4

lars_hjemlicgitMatch0.5

lars_hjemlicgitMatch0.6

lars_hjemlicgitMatch0.6.1

lars_hjemlicgitMatch0.6.2

lars_hjemlicgitMatch0.6.3

lars_hjemlicgitMatch0.7

lars_hjemlicgitMatch0.7.1

lars_hjemlicgitMatch0.7.2

lars_hjemlicgitMatch0.8

lars_hjemlicgitMatch0.8.1

lars_hjemlicgitMatch0.8.1.1

lars_hjemlicgitMatch0.8.2

lars_hjemlicgitMatch0.8.2.1

lars_hjemlicgitMatch0.8.2.2

lars_hjemlicgitMatch0.8.3

lars_hjemlicgitMatch0.8.3.1

lars_hjemlicgitMatch0.8.3.2

lars_hjemlicgitMatch0.8.3.3

lars_hjemlicgitMatch0.8.3.4

lars_hjemlicgitMatch0.8.3.5

lars_hjemlicgitMatch0.9

lars_hjemlicgitMatch0.9.0.1

lars_hjemlicgitMatch0.9.0.2

VendorProductVersionCPE
lars_hjemlicgit*cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
lars_hjemlicgit0.1cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
lars_hjemlicgit0.2cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
lars_hjemlicgit0.3cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
lars_hjemlicgit0.4cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
lars_hjemlicgit0.5cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
lars_hjemlicgit0.6cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
lars_hjemlicgit0.6.1cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
lars_hjemlicgit0.6.2cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
lars_hjemlicgit0.6.3cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lars_hjemli	cgit	*	cpe:2.3:a:lars_hjemli:cgit::::::::
lars_hjemli	cgit	0.1	cpe:2.3:a:lars_hjemli:cgit:0.1:::::::*
lars_hjemli	cgit	0.2	cpe:2.3:a:lars_hjemli:cgit:0.2:::::::*
lars_hjemli	cgit	0.3	cpe:2.3:a:lars_hjemli:cgit:0.3:::::::*
lars_hjemli	cgit	0.4	cpe:2.3:a:lars_hjemli:cgit:0.4:::::::*
lars_hjemli	cgit	0.5	cpe:2.3:a:lars_hjemli:cgit:0.5:::::::*
lars_hjemli	cgit	0.6	cpe:2.3:a:lars_hjemli:cgit:0.6:::::::*
lars_hjemli	cgit	0.6.1	cpe:2.3:a:lars_hjemli:cgit:0.6.1:::::::*
lars_hjemli	cgit	0.6.2	cpe:2.3:a:lars_hjemli:cgit:0.6.2:::::::*
lars_hjemli	cgit	0.6.3	cpe:2.3:a:lars_hjemli:cgit:0.6.3:::::::*