Lucene search

Ubuntu.comUB:CVE-2012-4037

HistoryAug 15, 2012 - 12:00 a.m.

CVE-2012-4037

2012-08-1500:00:00

ubuntu.com

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

74.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the web client in
Transmission before 2.61 allow remote attackers to inject arbitrary web
script or HTML via the (1) comment, (2) created by, or (3) name field in a
torrent file.

Bugs

Notes

Author	Note
mdeslaur	can’t reproduce in oneiric and earlier

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchtransmission< 2.51-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	transmission	< 2.51-0ubuntu1.1	UNKNOWN

References

archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html

secunia.com/advisories/50027

www.madirish.net/541

launchpad.net/bugs/cve/CVE-2012-4037

nvd.nist.gov/vuln/detail/CVE-2012-4037

security-tracker.debian.org/tracker/CVE-2012-4037

ubuntu.com/security/notices/USN-1584-1

www.cve.org/CVERecord?id=CVE-2012-4037

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

74.0%

JSON

Related for UB:CVE-2012-4037