CVE-2011-1589

{"id": "CVE-2011-1589", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-04-29T22:55:02.467", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.16/Changes", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058885.html", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058891.html", "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/04/17/1", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/04/18/3", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/04/18/7", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://perlninja.posterous.com/sharks-in-the-water", "source": "secalert@redhat.com"}, {"url": "http://search.cpan.org/CPAN/authors/id/K/KR/KRAIH/Mojolicious-1.16.tar.gz", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/44051", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/44359", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2011/dsa-2221", "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/71850", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/47402", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2011/1072", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2011/1093", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=697229", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66830", "source": "secalert@redhat.com"}, {"url": "https://github.com/kraih/mojo/commit/b09854988c5b5b6a2ba53cc8661c4b2677da3818", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://github.com/kraih/mojo/issues/114", "tags": ["Exploit"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI."}, {"lang": "es", "value": "Una vulnerabilidad de salto de directorio en Path.pm en Mojolicious antes de v1.16 permite a atacantes remotos leer archivos de su elecci\u00f3n a trav\u00e9s de un 2f%..%2f (barra punto punto barra) en una URI."}], "lastModified": "2017-08-17T01:34:16.637", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "083A2DA9-38BB-4AF8-9FF0-41101E830A0D"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2C11EC7-D91E-4F65-9C8A-801C724EDBBF"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC33620B-2B78-4221-8067-15E8BC56865A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69AC00B5-717B-4F7F-AD25-9754BEFD7221"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2E2469A-BE25-4D18-8E7D-F709DCB86FCF"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02BB8742-9D5C-4831-BD2F-A24505B8E4C7"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82CA1476-123D-44D5-A1E8-D9C58F6D9949"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "479781F2-9614-4552-AE39-12AC41ABB3AD"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78D1279D-333D-4338-B4ED-07BB1900FB0B"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D21184D-8823-4162-961D-8A7856557786"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "538FC292-B6BF-4551-AE44-259E0B61B680"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "574F7A7C-3986-401D-A58F-6C8F7D922002"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDACD094-8117-460E-B7D1-E63EC00B97A5"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8006:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6965DAA1-FDD8-484B-873A-F6D13227FAD0"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8007:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9865E142-BB29-4718-BD85-F40E185BF31E"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F667C15-3C89-49CD-800D-303A2677FC36"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.8009:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B301544-A38F-417C-BB94-E7711F8ED7C2"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.9001:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADEBDEB2-3070-4633-A934-DDF49CBD10C5"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.9002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5875A25D-CC0E-43CF-B617-CEA99C65A52A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991231:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8C04B9B-DEA3-4161-8E6C-BBBBE9AF5444"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991232:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE5F9699-7B1B-4356-B0EB-C942888AFEE9"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991233:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A041B8EB-AD9E-452B-9A2E-22DBCD5CB091"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991234:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BE7A136-3975-400A-AB77-4BCD4669553A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991235:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE628F19-D7C9-4E6D-BDC4-5C82CDE540E3"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991236:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26803A52-EAEC-4CD6-BB89-F1EF40B3021F"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991237:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7BC4454-3168-420B-9136-21FD18571526"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991238:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A346280F-BA80-4FBA-BD15-6CA7A1ED8D8C"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991239:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0376F10-8493-498D-9B5D-76AFE0F4417A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991240:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69293BBF-7788-4462-AA6F-9D3A084D1B3A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991241:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31F30FA3-69EC-45B3-8AF5-852DB73756A7"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991242:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B88557E4-C793-4F6A-A3AE-07799B212ECB"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991243:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F88C231-60FE-42F3-87E9-23E88ADC7650"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991244:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD65F43C-98A9-46A1-BCC4-79ACB5F5C6B2"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991245:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0A9F1C7-1C0A-42B1-91D3-676E03E64BB9"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991246:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A886B4DC-30E9-4C41-A79A-96F309F343F1"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991250:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C28AEC3C-20F0-4BFB-B7B6-30336C631400"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.991251:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D0521BF-A66D-4663-83C6-49E650454ED5"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999901:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C95BB3D-774C-4C71-9A3A-15938BA5CF6F"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999902:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B583B413-4B8E-4FA3-9CD1-A650CEAB9449"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999903:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDC7A6F1-BD38-4119-B5A7-56A50EC6C9C7"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999904:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DEFF843-57F4-4553-ABD3-7269A32A6DE4"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999905:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8A7C4E6-5E3E-43CB-8F54-4AA5563EA98C"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999906:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6CB9879-D8B4-45CA-BF63-D4681C403818"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999907:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66EE203A-CFB1-4317-879D-E6A44F063F66"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999908:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7978FDA-7622-4041-BE9E-28F99A1FB16E"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999909:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0975B5B-5409-42F5-A50F-644A80F3E5F8"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999910:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69AB9069-49F9-43B5-9F0F-04BBB145FD7B"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999911:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77CA7A3A-254D-4154-8AFB-FA7BC4EB286A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999912:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FA8D9CE-BD9E-4BD2-B38C-909CCE0D3842"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999913:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DABFC81-F44C-46AB-B9CD-D35624F5071A"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999914:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE8BDB83-641B-4858-B00A-EEFC9F583050"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999920:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D010713B-DE3E-4E76-8299-FF50D19ADA45"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999921:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92B83ECE-5D7C-417D-9957-976ECE8E2308"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999922:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59E2E6AF-11DD-4C51-A84F-129D160ACAFD"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999923:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9590109-8DFC-4E78-B678-8456A0621C08"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999924:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03FD1031-0C3D-45F1-BFD9-823C6D4B69F9"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999925:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44059C1E-CDC6-4B75-92CC-CD45C5063F9D"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999926:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6278FC7E-6852-46B1-9F38-58847391B2F9"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999927:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88FDE0AA-B353-4CD8-BC9D-DFC709031FF0"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999928:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CABDE1E8-17E9-4EF5-91C7-9688B0F49AE0"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999929:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66454D2F-C566-4F3D-AF78-C3FE75A6C62D"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999930:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83E28BE4-60FE-46E9-8AA4-45B14A34E2CC"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999931:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "914475F6-3C2F-4D15-8017-588763BF37E7"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999932:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12806A34-36FA-4B19-B84E-7385A8EDB302"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999933:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAB41DB0-C61F-441F-A8C7-624845EE39ED"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999934:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3762061D-FCC3-43EE-BC73-1BEF6BBC8980"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999935:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FE3BAE8-B78E-490E-90A7-8DF957D9CA7C"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999936:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C347C9AE-D2AA-4440-B506-1B692C7C52CD"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999937:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62704DAC-BFE8-4D27-9F2E-FB8D70E43063"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999938:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C3E1157-11FB-45FA-8E4A-53A3614B335D"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999939:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9674613-3BDB-471E-A109-83FF1463FCAE"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999940:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB59D0D0-E453-4700-9A96-9A452E5C90E3"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999941:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5A3B80D-8BD9-4F01-AAA8-B50CB3084E41"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:0.999950:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBCB14A8-635D-4652-9F76-E718F60D0FC3"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FD46D41-AE54-4223-A659-7E21EC0EC6A4"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393D68B4-0E53-4973-80FF-F57CC470E16B"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "151552D1-9D07-4424-863B-FC1948619799"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A06E107C-680E-4032-9E4A-1A8A641BB0E2"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0950430-F9CC-4FF8-801B-62BDCEEDA356"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D6573B3-A92D-497E-8238-9F934C519A51"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C04F3413-81FB-4B48-8D43-FD7E367B711E"}, {"criteria": "cpe:2.3:a:mojolicious:mojolicious:1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40F11435-B786-44F2-9E6B-09E0C743913F"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}