Lucene search
Ubuntu.comUB:CVE-2012-2330HistoryAug 13, 2012 - 12:00 a.m.
CVE-2012-2330
2012-08-1300:00:00
ubuntu.com
ubuntu.com
13
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.007
Percentile
80.9%
The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and
0.7 before 0.7.8 does not properly check the length of a string, which
allows remote attackers to obtain sensitive information (request header
contents) and possibly spoof HTTP headers via a zero length string.
Related
cvelist
cvelist
CVE-2012-2330
2012-08-13 23:00:00
prion
prion
Design/Logic Flaw
2012-08-13 23:55:00
cve
cve
CVE-2012-2330
2012-08-13 23:55:01
f5
f5
K99038439 : NodeJS vulnerability CVE-2012-2330
2019-11-25 00:00:00
openvas
openvas
FreeBSD Ports: node, node-devel
2012-05-31 00:00:00
debiancve
debiancve
CVE-2012-2330
2012-08-13 23:55:01
nvd
nvd
CVE-2012-2330
2012-08-13 23:55:01
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.007
Percentile
80.9%
Related for UB:CVE-2012-2330