CVE-2012-2968: Path Traversal

Q: What is the severity of CVE-2012-2968?

CVE-2012-2968 is classified as a medium-severity vulnerability due to its potential for remote exploitation.

Q: How do I fix CVE-2012-2968?

To fix CVE-2012-2968, upgrade Caucho Quercus or Resin to version 4.0.29 or later.

Q: What causes CVE-2012-2968?

CVE-2012-2968 is caused by a directory traversal vulnerability that allows attackers to craft paths with '..' to access unauthorized directories.

Q: Which versions are affected by CVE-2012-2968?

CVE-2012-2968 affects Resin versions before 4.0.29, including multiple versions in the 2.x, 3.x, and 4.x series.

Q: Who is impacted by CVE-2012-2968?

Users and organizations running affected versions of Caucho Resin are at risk from CVE-2012-2968, making them susceptible to unauthorized file access.

Published Aug 12, 2012

Updated

Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.

Affected Software

88 affected components

Caucho Resin<=4.0.28

Caucho Resin=2.0.0

Caucho Resin=2.0.1

Caucho Resin=2.0.2

Caucho Resin=2.0.3

Caucho Resin=2.0.4

Caucho Resin=2.0.5

Caucho Resin=2.1.0

Caucho Resin=2.1.1

Caucho Resin=2.1.2

Caucho Resin=2.1.3

Caucho Resin=2.1.4

Caucho Resin=2.1.5

Caucho Resin=2.1.6

Caucho Resin=2.1.7

Caucho Resin=2.1.8

Caucho Resin=2.1.9

Caucho Resin=2.1.10

Caucho Resin=2.1.11

Caucho Resin=2.1.12

Caucho Resin=2.1.13

Caucho Resin=2.1.14

Caucho Resin=2.1.15

Caucho Resin=2.1.16

Caucho Resin=2.1.snap

Caucho Resin=3.0.0

Caucho Resin=3.0.1-beta

Caucho Resin=3.0.2-beta

Caucho Resin=3.0.3

Caucho Resin=3.0.4

Caucho Resin=3.0.5

Caucho Resin=3.0.6

Caucho Resin=3.0.7

Caucho Resin=3.0.8

Caucho Resin=3.0.9

Caucho Resin=3.0.10

Caucho Resin=3.0.11

Caucho Resin=3.0.12

Caucho Resin=3.0.13

Caucho Resin=3.0.14

Caucho Resin=3.0.15

Caucho Resin=3.0.16

Caucho Resin=3.0.17

Caucho Resin=3.0.18

Caucho Resin=3.0.19

Caucho Resin=3.0.20

Caucho Resin=3.1.0

Caucho Resin=3.1.1

Caucho Resin=3.1.2

Caucho Resin=3.1.3

Caucho Resin=3.1.4

Caucho Resin=3.1.5

Caucho Resin=3.1.6

Caucho Resin=3.1.7

Caucho Resin=3.1.8

Caucho Resin=3.1.9

Caucho Resin=3.1.10

Caucho Resin=3.1.11

Caucho Resin=3.1.12

Caucho Resin=3.1.13

Caucho Resin=4.0.0

Caucho Resin=4.0.1

Caucho Resin=4.0.2

Caucho Resin=4.0.3

Caucho Resin=4.0.4

Caucho Resin=4.0.5

Caucho Resin=4.0.6

Caucho Resin=4.0.7

Caucho Resin=4.0.8

Caucho Resin=4.0.9

Caucho Resin=4.0.10

Caucho Resin=4.0.11

Caucho Resin=4.0.12

Caucho Resin=4.0.13

Caucho Resin=4.0.14

Caucho Resin=4.0.15

Caucho Resin=4.0.16

Caucho Resin=4.0.17

Caucho Resin=4.0.18

Caucho Resin=4.0.19

Caucho Resin=4.0.20

Caucho Resin=4.0.21

Caucho Resin=4.0.22

Caucho Resin=4.0.23

Caucho Resin=4.0.24

Caucho Resin=4.0.25

Caucho Resin=4.0.26

Caucho Resin=4.0.27

Event History

Aug 12, 2012

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2968?

CVE-2012-2968 is classified as a medium-severity vulnerability due to its potential for remote exploitation.

How do I fix CVE-2012-2968?

To fix CVE-2012-2968, upgrade Caucho Quercus or Resin to version 4.0.29 or later.

What causes CVE-2012-2968?