CVE-2012-2751 ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/fo...
MediumCVSS 4.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/modsecurity-apache(Debian:12) | < 2.6.6-1 | 2.6.6-1 |
| debian/modsecurity-apache(Debian:13) | < 2.6.6-1 | 2.6.6-1 |
| debian/modsecurity-apache(Debian:14) | < 2.6.6-1 | 2.6.6-1 |
| trustwave modsecurity | < 2.6.6 | 2.6.6 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| oracle http server | = 11.1.1.6.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-2751 vendor-advisory
- blog.ivanristic.com third-party-advisory
- openSUSE-SU-2013:1331 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1336 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:1342 mailing-list third-party-advisory vendor-advisory
- mod-security.svn.sourceforge.net broken-link
- mod-security.svn.sourceforge.net broken-link
- mod-security.svn.sourceforge.net broken-link
- 49576 third-party-advisory
- 49782 third-party-advisory
- DSA-2506 third-party-advisory vendor-advisory
- MDVSA-2012:118 third-party-advisory vendor-advisory
- MDVSA-2013:150 third-party-advisory vendor-advisory
- [oss-security] 20120621 mod_security CVE request mailing-list third-party-advisory
- [oss-security] 20120621 Re: mod_security CVE request mailing-list third-party-advisory
- www.oracle.com third-party-advisory
- 54156 third-party-advisory vdb-entry
- bugs.debian.org issue-tracking