Lucene search
RootSSV:60321HistoryAug 13, 2012 - 12:00 a.m.
Apache QPID NullAuthenticator验证绕过漏洞
2012-08-1300:00:00
Root
www.seebug.org
13
0.002 Low
EPSS
Percentile
64.9%
Bugtraq ID:54954
CVE ID:CVE-2012-3467
Apache Qpid (Open Source AMQP Messaging)是一个跨平台的企业通讯解决方案，实现了高级消息队列协议。
Apache Qpid C++库实现存在安全缺陷，允许在影子链接(shadow connections)中使用NullAuthenticator机制进行验证，导致AMQP客户端应用绕过验证访问broker。
0
bitcoind/Bitcoin-Qt 0.3.11之前版本
厂商解决方案
用户可参考如下供应商提供的安全公告获得补丁信息：
http://svn.apache.org/viewvc?view=revision&revision=1352992
Related
nvd
nvd
CVE-2012-3467
2012-08-27 23:55:02
CVE-2012-3550
2017-07-21 19:29:00
github
github
Apache QPID Allows Remote Authentication Bypass
2022-05-17 01:44:00
osv
osv
Apache QPID Allows Remote Authentication Bypass
2022-05-17 01:44:00
cve
cve
CVE-2012-3467
2012-08-27 23:55:02
CVE-2012-3550
2017-07-21 19:29:00
nessus
nessus
RHEL 6 : MRG Messaging (RHSA-2012:1279)
2014-07-22 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:57:42
prion
prion
Authentication flaw
2012-08-27 23:55:00
cvelist
cvelist
CVE-2012-3467
2012-08-27 23:00:00
redhat
redhat
(RHSA-2012:1279) Moderate: Red Hat Enterprise MRG Messaging 2.2 update
2012-09-19 00:00:00
(RHSA-2012:1277) Moderate: Red Hat Enterprise MRG Messaging 2.2 update
2012-09-19 00:00:00
ubuntucve
ubuntucve
CVE-2012-3467
2012-08-27 00:00:00