CVE-2012-3501

{"id": "CVE-2012-3501", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-08-25T10:29:52.630", "references": [{"url": "http://freecode.com/projects/squidclamav/releases/346722", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/49057", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://squidclamav.darold.net/news.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/08/16/2", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/08/16/4", "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/84138", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/54663", "source": "secalert@redhat.com"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=428778", "source": "secalert@redhat.com"}, {"url": "https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A."}, {"lang": "es", "value": "La funci\u00f3n squidclamav_check_preview_handler en squidclamav.c en SquidClamav v5.x antes de v5.8 y v6.x antes de v6.7 pasa una URL sin escapar a una llamada de comando del sistema, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) a trav\u00e9s de una URL con ciertos caracteres, como se demuestra usando %0D o %0A."}], "lastModified": "2012-08-27T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:darold:squidclamav:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7CB4208-C119-447E-A7C0-A90BFB499698"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C153D901-EE91-4F3E-A464-23DFA755A4D6"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E962A89-690A-400F-9B29-8E2A6FC3D81E"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B9CE52F-283E-46FC-83DF-79408B2AC0EF"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E37D71-5E81-4526-9E6F-E52162EF840D"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D122E4F9-D9DA-4F67-A37B-37270B279580"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB6C2F4A-92F2-466F-AA7B-86693C484900"}, {"criteria": "cpe:2.3:a:darold:squidclamav:5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B575DE2-DA05-4FA5-8531-2C02F5E826F1"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "021CE5B8-5366-43E5-8E63-5D6278DF33DC"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87A102FB-D889-453C-99A4-AE99C09A8573"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "702AC483-3B87-4AC7-8770-7CD3551BFDB5"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E48B46D6-1647-41FA-AB7D-2D15B391F0D3"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FCF8084-8DE0-472D-984A-BDCD696D5D8D"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E9D61D0-38F6-4EF2-8E8D-544F485B37C0"}, {"criteria": "cpe:2.3:a:darold:squidclamav:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3692992-16C8-4607-8D17-7BF2A1675081"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}