CVE-2012-2969: Medium severity Caucho Resin vulnerability
Published Aug 12, 2012
·Updated
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
Affected Software
88 affected components
Caucho Resin<=4.0.28
Caucho Resin=2.0.0
Caucho Resin=2.0.1
Caucho Resin=2.0.2
Caucho Resin=2.0.3
Caucho Resin=2.0.4
Caucho Resin=2.0.5
Caucho Resin=2.1.0
Caucho Resin=2.1.1
Caucho Resin=2.1.2
Caucho Resin=2.1.3
Caucho Resin=2.1.4
Caucho Resin=2.1.5
Caucho Resin=2.1.6
Caucho Resin=2.1.7
Caucho Resin=2.1.8
Caucho Resin=2.1.9
Caucho Resin=2.1.10
Caucho Resin=2.1.11
Caucho Resin=2.1.12
Caucho Resin=2.1.13
Caucho Resin=2.1.14
Caucho Resin=2.1.15
Caucho Resin=2.1.16
Caucho Resin=2.1.snap
Caucho Resin=3.0.0
Caucho Resin=3.0.1-beta
Caucho Resin=3.0.2-beta
Caucho Resin=3.0.3
Caucho Resin=3.0.4
Caucho Resin=3.0.5
Caucho Resin=3.0.6
Caucho Resin=3.0.7
Caucho Resin=3.0.8
Caucho Resin=3.0.9
Caucho Resin=3.0.10
Caucho Resin=3.0.11
Caucho Resin=3.0.12
Caucho Resin=3.0.13
Caucho Resin=3.0.14
Caucho Resin=3.0.15
Caucho Resin=3.0.16
Caucho Resin=3.0.17
Caucho Resin=3.0.18
Caucho Resin=3.0.19
Caucho Resin=3.0.20
Caucho Resin=3.1.0
Caucho Resin=3.1.1
Caucho Resin=3.1.2
Caucho Resin=3.1.3
Caucho Resin=3.1.4
Caucho Resin=3.1.5
Caucho Resin=3.1.6
Caucho Resin=3.1.7
Caucho Resin=3.1.8
Caucho Resin=3.1.9
Caucho Resin=3.1.10
Caucho Resin=3.1.11
Caucho Resin=3.1.12
Caucho Resin=3.1.13
Caucho Resin=4.0.0
Caucho Resin=4.0.1
Caucho Resin=4.0.2
Caucho Resin=4.0.3
Caucho Resin=4.0.4
Caucho Resin=4.0.5
Caucho Resin=4.0.6
Caucho Resin=4.0.7
Caucho Resin=4.0.8
Caucho Resin=4.0.9
Caucho Resin=4.0.10
Caucho Resin=4.0.11
Caucho Resin=4.0.12
Caucho Resin=4.0.13
Caucho Resin=4.0.14
Caucho Resin=4.0.15
Caucho Resin=4.0.16
Caucho Resin=4.0.17
Caucho Resin=4.0.18
Caucho Resin=4.0.19
Caucho Resin=4.0.20
Caucho Resin=4.0.21
Caucho Resin=4.0.22
Caucho Resin=4.0.23
Caucho Resin=4.0.24
Caucho Resin=4.0.25
Caucho Resin=4.0.26
Caucho Resin=4.0.27
Event History
Aug 12, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2969?
CVE-2012-2969 has been categorized as a medium severity vulnerability due to its potential impact on file upload restrictions.
2
How do I fix CVE-2012-2969?
To fix CVE-2012-2969, upgrade to Resin version 4.0.29 or later, which addresses this vulnerability.
3
Who is affected by CVE-2012-2969?
CVE-2012-2969 affects all versions of Caucho Resin prior to 4.0.29.
4
What type of vulnerability is CVE-2012-2969?
CVE-2012-2969 is a file handling vulnerability that allows attackers to bypass intended restrictions.
5
What can attackers do with CVE-2012-2969?
Attackers can exploit CVE-2012-2969 to create files with unintended filename extensions, potentially causing security issues.