ByteOS Network

CVE Vulnerability Details :

CVE-2012-0036

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-13 Apr, 2012 | 20:00

Updated At-06 Aug, 2024 | 18:09

▼CVE Numbering Authority (CNA)

curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	x_refsource_CONFIRM
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	vendor-advisory x_refsource_HP
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032924	vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2012/dsa-2398	vendor-advisory x_refsource_DEBIAN
http://security.gentoo.org/glsa/glsa-201203-02.xml	vendor-advisory x_refsource_GENTOO
http://www.securityfocus.com/bid/51665	vdb-entry x_refsource_BID
http://secunia.com/advisories/48256	third-party-advisory x_refsource_SECUNIA
http://curl.haxx.se/docs/adv_20120124.html	x_refsource_CONFIRM
http://curl.haxx.se/curl-url-sanitize.patch	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2012:058	vendor-advisory x_refsource_MANDRIVA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	vendor-advisory x_refsource_HP
https://bugzilla.redhat.com/show_bug.cgi?id=773457	x_refsource_CONFIRM
http://support.apple.com/kb/HT5281	x_refsource_CONFIRM
https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html	vendor-advisory x_refsource_APPLE

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1032924

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.debian.org/security/2012/dsa-2398

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://security.gentoo.org/glsa/glsa-201203-02.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securityfocus.com/bid/51665

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://secunia.com/advisories/48256

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://curl.haxx.se/docs/adv_20120124.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://curl.haxx.se/curl-url-sanitize.patch

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:058

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=773457

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT5281

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	x_refsource_CONFIRM x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	vendor-advisory x_refsource_HP x_transferred
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1032924	vdb-entry x_refsource_SECTRACK x_transferred
http://www.debian.org/security/2012/dsa-2398	vendor-advisory x_refsource_DEBIAN x_transferred
http://security.gentoo.org/glsa/glsa-201203-02.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securityfocus.com/bid/51665	vdb-entry x_refsource_BID x_transferred
http://secunia.com/advisories/48256	third-party-advisory x_refsource_SECUNIA x_transferred
http://curl.haxx.se/docs/adv_20120124.html	x_refsource_CONFIRM x_transferred
http://curl.haxx.se/curl-url-sanitize.patch	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2012:058	vendor-advisory x_refsource_MANDRIVA x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	vendor-advisory x_refsource_HP x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=773457	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT5281	x_refsource_CONFIRM x_transferred
https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred