Lucene search
HistoryNov 08, 2012 - 11:46 a.m.
CVE-2012-4023
cve-2012-4023
crlf injection
pebble
vulnerability
http headers
http response splitting
remote attackers
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
Node
simon_brownpebbleRange≤2.6.3
ORsimon_brownpebbleMatch1.0
ORsimon_brownpebbleMatch1.1
ORsimon_brownpebbleMatch1.2
ORsimon_brownpebbleMatch1.3
ORsimon_brownpebbleMatch1.4
ORsimon_brownpebbleMatch1.4beta1
ORsimon_brownpebbleMatch1.4beta2
ORsimon_brownpebbleMatch1.4beta3
ORsimon_brownpebbleMatch1.4.1
ORsimon_brownpebbleMatch1.4.2
ORsimon_brownpebbleMatch1.5
ORsimon_brownpebbleMatch1.5beta1
ORsimon_brownpebbleMatch1.5beta2
ORsimon_brownpebbleMatch1.5.1
ORsimon_brownpebbleMatch1.6beta3
ORsimon_brownpebbleMatch1.7
ORsimon_brownpebbleMatch1.7beta1
ORsimon_brownpebbleMatch1.7.1
ORsimon_brownpebbleMatch1.7.2
ORsimon_brownpebbleMatch1.8
ORsimon_brownpebbleMatch1.9
ORsimon_brownpebbleMatch2.0
ORsimon_brownpebbleMatch2.0.0m1
ORsimon_brownpebbleMatch2.0.0m2
ORsimon_brownpebbleMatch2.0.0m3
ORsimon_brownpebbleMatch2.0.0rc1
ORsimon_brownpebbleMatch2.0.0rc2
ORsimon_brownpebbleMatch2.0.1
ORsimon_brownpebbleMatch2.1
ORsimon_brownpebbleMatch2.1rc1
ORsimon_brownpebbleMatch2.2
ORsimon_brownpebbleMatch2.3
ORsimon_brownpebbleMatch2.3.1
ORsimon_brownpebbleMatch2.3.2
ORsimon_brownpebbleMatch2.4
ORsimon_brownpebbleMatch2.4rc2
ORsimon_brownpebbleMatch2.5
ORsimon_brownpebbleMatch2.5m1
ORsimon_brownpebbleMatch2.5m2
ORsimon_brownpebbleMatch2.5rc1
ORsimon_brownpebbleMatch2.5.1
ORsimon_brownpebbleMatch2.5.2
ORsimon_brownpebbleMatch2.5.3
ORsimon_brownpebbleMatch2.6
ORsimon_brownpebbleMatch2.6m1
ORsimon_brownpebbleMatch2.6.1
ORsimon_brownpebbleMatch2.6.2
Related
prion
prion
Crlf injection
2012-11-08 11:46:00
nvd
nvd
CVE-2012-4023
2012-11-08 11:46:24
jvn
jvn
JVN#39563771: Pebble vulnerable to HTTP header injection
2012-11-02 00:00:00
cvelist
cvelist
CVE-2012-4023
2012-11-08 11:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.0%
Related for CVE-2012-4023