Lucene search

[email protected]CVE-2012-3301

HistoryAug 21, 2012 - 10:46 a.m.

CVE-2012-3301

2012-08-2110:46:00

CWE-20

[email protected]

web.nvd.nist.gov

ibm

lotus domino

http server

crlf injection

vulnerabilities

cve-2012-3301

nvd

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.2%

JSON

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving (1) Mozilla Firefox 3.0.9 and earlier or (2) unspecified browsers.

CPENameOperatorVersion
ibm:lotus_dominoibm lotus dominoeq8.5.2.4
ibm:lotus_dominoibm lotus dominoeq8.5.1.1
ibm:lotus_dominoibm lotus dominoeq8.5.1.4
ibm:lotus_dominoibm lotus dominoeq8.5.2.2
ibm:lotus_dominoibm lotus dominoeq8.5.2.1
ibm:lotus_dominoibm lotus dominoeq8.5.0.1
ibm:lotus_dominoibm lotus dominoeq8.5.3.0
ibm:lotus_dominoibm lotus dominoeq8.5.0
ibm:lotus_dominoibm lotus dominoeq8.5.1.2
ibm:lotus_dominoibm lotus dominoeq8.5.3.1

CPE	Name	Operator	Version
ibm:lotus_domino	ibm lotus domino	eq	8.5.2.4
ibm:lotus_domino	ibm lotus domino	eq	8.5.1.1
ibm:lotus_domino	ibm lotus domino	eq	8.5.1.4
ibm:lotus_domino	ibm lotus domino	eq	8.5.2.2
ibm:lotus_domino	ibm lotus domino	eq	8.5.2.1
ibm:lotus_domino	ibm lotus domino	eq	8.5.0.1
ibm:lotus_domino	ibm lotus domino	eq	8.5.3.0
ibm:lotus_domino	ibm lotus domino	eq	8.5.0
ibm:lotus_domino	ibm lotus domino	eq	8.5.1.2
ibm:lotus_domino	ibm lotus domino	eq	8.5.3.1

Rows per page:

1-10 of 151

References

websecurity.com.ua/5839/

www-01.ibm.com/support/docview.wss?uid=swg21608160

exchange.xforce.ibmcloud.com/vulnerabilities/77400

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.2%

JSON

Related for CVE-2012-3301

prion1 securityvulns3 seebug2 openvas1