PT-2012-3041

CVE-2012-1050

·

Published

2012-02-13

·

Updated

2023-02-08

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mathopd versions 1.4.x through 1.5.x before 1.5p7
Description A directory traversal issue exists when Mathopd is configured with the * construct for mass virtual hosting, allowing remote attackers to read arbitrary files by sending a crafted Host header.
Recommendations For versions 1.4.x through 1.5.x before 1.5p7, update to version 1.5p7 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2012-1050
ALT-PU-2023-1197
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com