CVE-2012-5057: CRLF Injection
Published Jun 4, 2014
·Updated
CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url path parameter.
Affected Software
15 affected components
ownCloud ownCloud<=4.0.7
ownCloud ownCloud=4.0.0
ownCloud ownCloud=4.0.1
ownCloud ownCloud=4.0.2
ownCloud ownCloud=4.0.3
ownCloud ownCloud=4.0.4
ownCloud ownCloud=4.0.5
ownCloud ownCloud=4.0.6
ownCloud ownCloud Server=4.0.0
ownCloud ownCloud Server=4.0.1
ownCloud ownCloud Server=4.0.2
ownCloud ownCloud Server=4.0.3
ownCloud ownCloud Server=4.0.4
ownCloud ownCloud Server=4.0.5
ownCloud ownCloud Server=4.0.6
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-5057?
CVE-2012-5057 has a medium severity rating as it allows remote attackers to inject arbitrary HTTP headers.
2
How do I fix CVE-2012-5057?
To fix CVE-2012-5057, upgrade your ownCloud Server to version 4.0.8 or later.
3
Who is affected by CVE-2012-5057?
CVE-2012-5057 affects ownCloud Server versions up to 4.0.7.
4
What type of attack is associated with CVE-2012-5057?
CVE-2012-5057 is associated with HTTP response splitting attacks due to CRLF injection.
5
Can CVE-2012-5057 be exploited remotely?
Yes, CVE-2012-5057 can be exploited remotely by attackers to inject malicious HTTP headers.