2017-10-16 12:31:07 -04:00
{
2019-03-18 02:47:57 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2012-0021" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 02:47:57 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1227292" ,
"refsource" : "CONFIRM" ,
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1227292"
} ,
{
"name" : "HPSBMU02786" ,
"refsource" : "HP" ,
"url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041"
} ,
{
"name" : "MDVSA-2012:012" ,
"refsource" : "MANDRIVA" ,
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2012:012"
} ,
{
"name" : "RHSA-2012:0543" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-0543.html"
} ,
{
"name" : "SSRT100772" ,
"refsource" : "HP" ,
"url" : "http://marc.info/?l=bugtraq&m=133294460209056&w=2"
} ,
{
"name" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=52256" ,
"refsource" : "CONFIRM" ,
"url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=52256"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=785065" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=785065"
} ,
{
"name" : "HPSBMU02748" ,
"refsource" : "HP" ,
"url" : "http://marc.info/?l=bugtraq&m=133294460209056&w=2"
} ,
{
"name" : "RHSA-2012:0542" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-0542.html"
} ,
{
"name" : "http://httpd.apache.org/security/vulnerabilities_22.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://httpd.apache.org/security/vulnerabilities_22.html"
} ,
{
"name" : "APPLE-SA-2012-09-19-2" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html"
} ,
{
"name" : "http://support.apple.com/kb/HT5501" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.apple.com/kb/HT5501"
} ,
{
"name" : "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
} ,
{
"name" : "SSRT100877" ,
"refsource" : "HP" ,
"url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041"
} ,
{
"name" : "HPSBUX02761" ,
"refsource" : "HP" ,
"url" : "http://marc.info/?l=bugtraq&m=133494237717847&w=2"
} ,
{
"name" : "MDVSA-2013:150" ,
"refsource" : "MANDRIVA" ,
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"
} ,
{
"name" : "48551" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/48551"
} ,
{
"name" : "SSRT100823" ,
"refsource" : "HP" ,
"url" : "http://marc.info/?l=bugtraq&m=133494237717847&w=2"
2019-08-15 09:01:07 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html" ,
"url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
2019-08-15 09:01:24 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html" ,
"url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
2019-03-18 02:47:57 +00:00
}
]
}
}