CVE-2012-0036

Published Apr 13, 2012

Last updated 7 years ago

Overview

Description: curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:curl:curl:7.20.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A9BDFC51-3AB0-4C43-8979-ECA18E8035C5"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.20.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3AC9C63-FD5E-4315-B9AF-9D8B1E988F98"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B05A4F5A-C65D-4662-8373-4FEA07558CBA"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "85ADB9E1-0356-4E55-B7FD-6425EAF2C643"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1EBA4E51-1C4B-4C2A-B13E-11D4FD9C1C50"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A333EB08-4E37-41EF-A204-C82CECE9A51D"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E29638D1-2620-46A2-BE15-4706B7C4E678"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA6D4422-C5C8-440F-B476-84DE445966DB"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D4506D93-8DBC-4E33-9432-C4A8CA3BDE6A"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.21.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5DADC1B7-2945-4CEC-A1D9-0CCA785F165D"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.22.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B7CFA6F8-A6B1-415A-8DFB-EA4AFA67160E"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.23.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7C18D23-0401-41C2-BAD7-8B2965691EF6"
          },
          {
            "criteria": "cpe:2.3:a:curl:curl:7.23.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A93EF4F2-101C-4FAD-A8F6-7A19EE2D6C8F"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.20.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34341428-2676-4431-A23F-65FBE90BAD3A"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.20.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D0B31BF7-F04D-4985-A0F2-5206D678D3CF"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E2630C2-3E7C-4836-A548-819679967099"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36FDE251-B1E1-4989-9ECB-07D4A760384E"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E52D4877-8ED5-4057-A55D-5C5F82175737"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77A81783-51FB-43F4-9D83-5E6134BADB08"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "31022B8A-B4D6-4F6B-9643-1266A65A3807"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6ACEDA5F-8B32-4898-A1B9-7FCC8110F54A"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24F20A9A-78F4-463B-A2C5-58721CE46210"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.21.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F4A1953-91D9-4B20-9A13-4974DA86683B"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.22.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2FFBF499-9028-4A50-B6FC-2B2D3AD7E9AD"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.23.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD5BCA31-3875-4585-8E42-8FAE354049A3"
          },
          {
            "criteria": "cpe:2.3:a:curl:libcurl:7.23.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9AA5ADA7-629B-4028-A023-DF119527A522"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References