CVE-2012-0216
Last modified
CVE-2012-0216 is a vulnerability of currently unknown severity. The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | 6.0 |
| Debian | Debian Linux | 7.0 |
References
- http://www.debian.org/security/2012/dsa-2452Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75211Third Party Advisory
- http://www.debian.org/security/2012/dsa-2452Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75211Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2012-0216?
How severe is CVE-2012-0216?
How do I fix CVE-2012-0216?
Are you affected by CVE-2012-0216?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST