CVE-2012-2751

2012-07-2200:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.3%

JSON

ModSecurity before 2.6.6, when used with PHP, does not properly handle
single quotes not at the beginning of a request parameter value in the
Content-Disposition field of a request with a multipart/form-data
Content-Type header, which allows remote attackers to bypass filtering
rules and perform other attacks such as cross-site scripting (XSS) attacks.
NOTE: this vulnerability exists because of an incomplete fix for
CVE-2009-5031.

Bugs

<https://launchpad.net/bugs/1016909>
<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678529 (libapache-mod-security)>
<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678527 (modsecurity-apache)>

Notes

Author	Note
tyhicks	Versions older than 2.6.6 are affected

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibapache-mod-security< 2.5.11-1ubuntu0.1UNKNOWN
ubuntu11.04noarchlibapache-mod-security< 2.5.12-1+squeeze1build0.11.04.1UNKNOWN
ubuntu11.10noarchlibapache-mod-security< 2.5.12-1+squeeze1build0.11.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	libapache-mod-security	< 2.5.11-1ubuntu0.1	UNKNOWN
ubuntu	11.04	noarch	libapache-mod-security	< 2.5.12-1+squeeze1build0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	libapache-mod-security	< 2.5.12-1+squeeze1build0.11.10.1	UNKNOWN