CVE-2012-2966: High severity caucho technology resin vulnerability
Published Aug 12, 2012
·Updated
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
Affected Software
89 affected componentsFixes available
Caucho Resin<=4.0.28
Caucho Resin=2.0.0
Caucho Resin=2.0.1
Caucho Resin=2.0.2
Caucho Resin=2.0.3
Caucho Resin=2.0.4
Caucho Resin=2.0.5
Caucho Resin=2.1.0
Caucho Resin=2.1.1
Caucho Resin=2.1.2
Caucho Resin=2.1.3
Caucho Resin=2.1.4
Caucho Resin=2.1.5
Caucho Resin=2.1.6
Caucho Resin=2.1.7
Caucho Resin=2.1.8
Caucho Resin=2.1.9
Caucho Resin=2.1.10
Caucho Resin=2.1.11
Caucho Resin=2.1.12
Caucho Resin=2.1.13
Caucho Resin=2.1.14
Caucho Resin=2.1.15
Caucho Resin=2.1.16
Caucho Resin=2.1.snap
Caucho Resin=3.0.0
Caucho Resin=3.0.1-beta
Caucho Resin=3.0.2-beta
Caucho Resin=3.0.3
Caucho Resin=3.0.4
Caucho Resin=3.0.5
Caucho Resin=3.0.6
Caucho Resin=3.0.7
Caucho Resin=3.0.8
Caucho Resin=3.0.9
Caucho Resin=3.0.10
Caucho Resin=3.0.11
Caucho Resin=3.0.12
Caucho Resin=3.0.13
Caucho Resin=3.0.14
Caucho Resin=3.0.15
Caucho Resin=3.0.16
Caucho Resin=3.0.17
Caucho Resin=3.0.18
Caucho Resin=3.0.19
Caucho Resin=3.0.20
Caucho Resin=3.1.0
Caucho Resin=3.1.1
Caucho Resin=3.1.2
Caucho Resin=3.1.3
Caucho Resin=3.1.4
Caucho Resin=3.1.5
Caucho Resin=3.1.6
Caucho Resin=3.1.7
Caucho Resin=3.1.8
Caucho Resin=3.1.9
Caucho Resin=3.1.10
Caucho Resin=3.1.11
Caucho Resin=3.1.12
Caucho Resin=3.1.13
Caucho Resin=4.0.0
Caucho Resin=4.0.1
Caucho Resin=4.0.2
Caucho Resin=4.0.3
Caucho Resin=4.0.4
Caucho Resin=4.0.5
Caucho Resin=4.0.6
Caucho Resin=4.0.7
Caucho Resin=4.0.8
Caucho Resin=4.0.9
Caucho Resin=4.0.10
Caucho Resin=4.0.11
Caucho Resin=4.0.12
Caucho Resin=4.0.13
Caucho Resin=4.0.14
Caucho Resin=4.0.15
Caucho Resin=4.0.16
Caucho Resin=4.0.17
Caucho Resin=4.0.18
Caucho Resin=4.0.19
Caucho Resin=4.0.20
Caucho Resin=4.0.21
Caucho Resin=4.0.22
Caucho Resin=4.0.23
Caucho Resin=4.0.24
Caucho Resin=4.0.25
Caucho Resin=4.0.26
Caucho Resin=4.0.27
maven/com.caucho:resin<4.0.29
4.0.29
Event History
Aug 12, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·05:23 AM
Data Sourced
via GitHub·05:23 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-2966?
CVE-2012-2966 is considered to have an unspecified severity rating due to its potential impact related to remote attacks.
2
How do I fix CVE-2012-2966?
To resolve CVE-2012-2966, upgrade to Resin version 4.0.29 or later.
3
What systems are affected by CVE-2012-2966?
CVE-2012-2966 affects various versions of Caucho Technology's Resin prior to 4.0.29.
4
What type of vulnerability is CVE-2012-2966?
CVE-2012-2966 is a vulnerability related to the improper handling of POST parameters affecting the SERVER superglobal array.
5
Can CVE-2012-2966 lead to remote exploitations?
Yes, CVE-2012-2966 can be exploited remotely due to its nature of overwriting server parameters.