CVE-2012-1180

Executive Summary

Informations
Name	CVE-2012-1180	First vendor Publication	2012-04-17
Vendor	Cve	Last vendor Modification	2012-07-10

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1180

CWE : Common Weakness Enumeration

id	Name
CWE-399	Resource Management Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Igor Sysoev Nginx cpe:/a:igor_sysoev:nginx:1.1.9 cpe:/a:igor_sysoev:nginx:1.1.8 cpe:/a:igor_sysoev:nginx:1.1.7 cpe:/a:igor_sysoev:nginx:1.1.6 cpe:/a:igor_sysoev:nginx:1.1.5 cpe:/a:igor_sysoev:nginx:1.1.4 cpe:/a:igor_sysoev:nginx:1.1.3 cpe:/a:igor_sysoev:nginx:1.1.2 cpe:/a:igor_sysoev:nginx:1.1.16 cpe:/a:igor_sysoev:nginx:1.1.15 cpe:/a:igor_sysoev:nginx:1.1.14 cpe:/a:igor_sysoev:nginx:1.1.13 cpe:/a:igor_sysoev:nginx:1.1.12 cpe:/a:igor_sysoev:nginx:1.1.11 cpe:/a:igor_sysoev:nginx:1.1.10 cpe:/a:igor_sysoev:nginx:1.1.1 cpe:/a:igor_sysoev:nginx:1.1.0 cpe:/a:igor_sysoev:nginx:1.0.9 cpe:/a:igor_sysoev:nginx:1.0.8 cpe:/a:igor_sysoev:nginx:1.0.7 cpe:/a:igor_sysoev:nginx:1.0.6 cpe:/a:igor_sysoev:nginx:1.0.5 cpe:/a:igor_sysoev:nginx:1.0.4 cpe:/a:igor_sysoev:nginx:1.0.3 cpe:/a:igor_sysoev:nginx:1.0.2 cpe:/a:igor_sysoev:nginx:1.0.14 cpe:/a:igor_sysoev:nginx:1.0.13 cpe:/a:igor_sysoev:nginx:1.0.12 cpe:/a:igor_sysoev:nginx:1.0.11 cpe:/a:igor_sysoev:nginx:1.0.10 cpe:/a:igor_sysoev:nginx:1.0.1 cpe:/a:igor_sysoev:nginx:1.0.0 cpe:/a:igor_sysoev:nginx:0.9.7 cpe:/a:igor_sysoev:nginx:0.9.6 cpe:/a:igor_sysoev:nginx:0.9.5 cpe:/a:igor_sysoev:nginx:0.9.4 cpe:/a:igor_sysoev:nginx:0.9.3 cpe:/a:igor_sysoev:nginx:0.9.2 cpe:/a:igor_sysoev:nginx:0.9.1 cpe:/a:igor_sysoev:nginx:0.9.0 cpe:/a:igor_sysoev:nginx:0.8.9 cpe:/a:igor_sysoev:nginx:0.8.8 cpe:/a:igor_sysoev:nginx:0.8.7 cpe:/a:igor_sysoev:nginx:0.8.6 cpe:/a:igor_sysoev:nginx:0.8.53 cpe:/a:igor_sysoev:nginx:0.8.52 cpe:/a:igor_sysoev:nginx:0.8.51 cpe:/a:igor_sysoev:nginx:0.8.50 cpe:/a:igor_sysoev:nginx:0.8.5 cpe:/a:igor_sysoev:nginx:0.8.49 cpe:/a:igor_sysoev:nginx:0.8.48 cpe:/a:igor_sysoev:nginx:0.8.47 cpe:/a:igor_sysoev:nginx:0.8.46 cpe:/a:igor_sysoev:nginx:0.8.45 cpe:/a:igor_sysoev:nginx:0.8.44 cpe:/a:igor_sysoev:nginx:0.8.43 cpe:/a:igor_sysoev:nginx:0.8.42 cpe:/a:igor_sysoev:nginx:0.8.41 cpe:/a:igor_sysoev:nginx:0.8.40 cpe:/a:igor_sysoev:nginx:0.8.4 cpe:/a:igor_sysoev:nginx:0.8.39 cpe:/a:igor_sysoev:nginx:0.8.38 cpe:/a:igor_sysoev:nginx:0.8.37 cpe:/a:igor_sysoev:nginx:0.8.36 cpe:/a:igor_sysoev:nginx:0.8.35 cpe:/a:igor_sysoev:nginx:0.8.34 cpe:/a:igor_sysoev:nginx:0.8.33 cpe:/a:igor_sysoev:nginx:0.8.32 cpe:/a:igor_sysoev:nginx:0.8.31 cpe:/a:igor_sysoev:nginx:0.8.30 cpe:/a:igor_sysoev:nginx:0.8.3 cpe:/a:igor_sysoev:nginx:0.8.29 cpe:/a:igor_sysoev:nginx:0.8.28 cpe:/a:igor_sysoev:nginx:0.8.27 cpe:/a:igor_sysoev:nginx:0.8.26 cpe:/a:igor_sysoev:nginx:0.8.25 cpe:/a:igor_sysoev:nginx:0.8.24 cpe:/a:igor_sysoev:nginx:0.8.23 cpe:/a:igor_sysoev:nginx:0.8.22 cpe:/a:igor_sysoev:nginx:0.8.21 cpe:/a:igor_sysoev:nginx:0.8.20 cpe:/a:igor_sysoev:nginx:0.8.2 cpe:/a:igor_sysoev:nginx:0.8.19 cpe:/a:igor_sysoev:nginx:0.8.18 cpe:/a:igor_sysoev:nginx:0.8.17 cpe:/a:igor_sysoev:nginx:0.8.16 cpe:/a:igor_sysoev:nginx:0.8.15 cpe:/a:igor_sysoev:nginx:0.8.14 cpe:/a:igor_sysoev:nginx:0.8.13 cpe:/a:igor_sysoev:nginx:0.8.12 cpe:/a:igor_sysoev:nginx:0.8.11 cpe:/a:igor_sysoev:nginx:0.8.10 cpe:/a:igor_sysoev:nginx:0.8.1 cpe:/a:igor_sysoev:nginx:0.8.0 cpe:/a:igor_sysoev:nginx:0.7.9 cpe:/a:igor_sysoev:nginx:0.7.8 cpe:/a:igor_sysoev:nginx:0.7.7 cpe:/a:igor_sysoev:nginx:0.7.6 cpe:/a:igor_sysoev:nginx:0.7.59 cpe:/a:igor_sysoev:nginx:0.7.58 cpe:/a:igor_sysoev:nginx:0.7.57 cpe:/a:igor_sysoev:nginx:0.7.56 cpe:/a:igor_sysoev:nginx:0.7.55 cpe:/a:igor_sysoev:nginx:0.7.54 cpe:/a:igor_sysoev:nginx:0.7.53 cpe:/a:igor_sysoev:nginx:0.7.52 cpe:/a:igor_sysoev:nginx:0.7.51 cpe:/a:igor_sysoev:nginx:0.7.50 cpe:/a:igor_sysoev:nginx:0.7.5 cpe:/a:igor_sysoev:nginx:0.7.49 cpe:/a:igor_sysoev:nginx:0.7.48 cpe:/a:igor_sysoev:nginx:0.7.47 cpe:/a:igor_sysoev:nginx:0.7.46 cpe:/a:igor_sysoev:nginx:0.7.45 cpe:/a:igor_sysoev:nginx:0.7.44 cpe:/a:igor_sysoev:nginx:0.7.43 cpe:/a:igor_sysoev:nginx:0.7.42 cpe:/a:igor_sysoev:nginx:0.7.41 cpe:/a:igor_sysoev:nginx:0.7.40 cpe:/a:igor_sysoev:nginx:0.7.4 cpe:/a:igor_sysoev:nginx:0.7.39 cpe:/a:igor_sysoev:nginx:0.7.38 cpe:/a:igor_sysoev:nginx:0.7.37 cpe:/a:igor_sysoev:nginx:0.7.36 cpe:/a:igor_sysoev:nginx:0.7.35 cpe:/a:igor_sysoev:nginx:0.7.34 cpe:/a:igor_sysoev:nginx:0.7.33 cpe:/a:igor_sysoev:nginx:0.7.32 cpe:/a:igor_sysoev:nginx:0.7.31 cpe:/a:igor_sysoev:nginx:0.7.30 cpe:/a:igor_sysoev:nginx:0.7.3 cpe:/a:igor_sysoev:nginx:0.7.29 cpe:/a:igor_sysoev:nginx:0.7.28 cpe:/a:igor_sysoev:nginx:0.7.27 cpe:/a:igor_sysoev:nginx:0.7.26 cpe:/a:igor_sysoev:nginx:0.7.25 cpe:/a:igor_sysoev:nginx:0.7.24 cpe:/a:igor_sysoev:nginx:0.7.23 cpe:/a:igor_sysoev:nginx:0.7.22 cpe:/a:igor_sysoev:nginx:0.7.21 cpe:/a:igor_sysoev:nginx:0.7.20 cpe:/a:igor_sysoev:nginx:0.7.2 cpe:/a:igor_sysoev:nginx:0.7.19 cpe:/a:igor_sysoev:nginx:0.7.18 cpe:/a:igor_sysoev:nginx:0.7.17 cpe:/a:igor_sysoev:nginx:0.7.16 cpe:/a:igor_sysoev:nginx:0.7.15 cpe:/a:igor_sysoev:nginx:0.7.14 cpe:/a:igor_sysoev:nginx:0.7.13 cpe:/a:igor_sysoev:nginx:0.7.12 cpe:/a:igor_sysoev:nginx:0.7.11 cpe:/a:igor_sysoev:nginx:0.7.10 cpe:/a:igor_sysoev:nginx:0.7.1 cpe:/a:igor_sysoev:nginx:0.7.0 cpe:/a:igor_sysoev:nginx:0.6.9 cpe:/a:igor_sysoev:nginx:0.6.8 cpe:/a:igor_sysoev:nginx:0.6.7 cpe:/a:igor_sysoev:nginx:0.6.6 cpe:/a:igor_sysoev:nginx:0.6.5 cpe:/a:igor_sysoev:nginx:0.6.4 cpe:/a:igor_sysoev:nginx:0.6.31 cpe:/a:igor_sysoev:nginx:0.6.30 cpe:/a:igor_sysoev:nginx:0.6.3 cpe:/a:igor_sysoev:nginx:0.6.29 cpe:/a:igor_sysoev:nginx:0.6.28 cpe:/a:igor_sysoev:nginx:0.6.27 cpe:/a:igor_sysoev:nginx:0.6.26 cpe:/a:igor_sysoev:nginx:0.6.25 cpe:/a:igor_sysoev:nginx:0.6.24 cpe:/a:igor_sysoev:nginx:0.6.23 cpe:/a:igor_sysoev:nginx:0.6.22 cpe:/a:igor_sysoev:nginx:0.6.21 cpe:/a:igor_sysoev:nginx:0.6.20 cpe:/a:igor_sysoev:nginx:0.6.2 cpe:/a:igor_sysoev:nginx:0.6.19 cpe:/a:igor_sysoev:nginx:0.6.18 cpe:/a:igor_sysoev:nginx:0.6.17 cpe:/a:igor_sysoev:nginx:0.6.16 cpe:/a:igor_sysoev:nginx:0.6.15 cpe:/a:igor_sysoev:nginx:0.6.14 cpe:/a:igor_sysoev:nginx:0.6.13 cpe:/a:igor_sysoev:nginx:0.6.12 cpe:/a:igor_sysoev:nginx:0.6.11 cpe:/a:igor_sysoev:nginx:0.6.10 cpe:/a:igor_sysoev:nginx:0.6.1 cpe:/a:igor_sysoev:nginx:0.6.0 cpe:/a:igor_sysoev:nginx:0.5.9 cpe:/a:igor_sysoev:nginx:0.5.8 cpe:/a:igor_sysoev:nginx:0.5.7 cpe:/a:igor_sysoev:nginx:0.5.6 cpe:/a:igor_sysoev:nginx:0.5.5 cpe:/a:igor_sysoev:nginx:0.5.4 cpe:/a:igor_sysoev:nginx:0.5.3 cpe:/a:igor_sysoev:nginx:0.5.25 cpe:/a:igor_sysoev:nginx:0.5.24 cpe:/a:igor_sysoev:nginx:0.5.23 cpe:/a:igor_sysoev:nginx:0.5.22 cpe:/a:igor_sysoev:nginx:0.5.21 cpe:/a:igor_sysoev:nginx:0.5.20 cpe:/a:igor_sysoev:nginx:0.5.2 cpe:/a:igor_sysoev:nginx:0.5.19 cpe:/a:igor_sysoev:nginx:0.5.18 cpe:/a:igor_sysoev:nginx:0.5.17 cpe:/a:igor_sysoev:nginx:0.5.16 cpe:/a:igor_sysoev:nginx:0.5.15 cpe:/a:igor_sysoev:nginx:0.5.14 cpe:/a:igor_sysoev:nginx:0.5.13 cpe:/a:igor_sysoev:nginx:0.5.12 cpe:/a:igor_sysoev:nginx:0.5.11 cpe:/a:igor_sysoev:nginx:0.5.10 cpe:/a:igor_sysoev:nginx:0.5.1 cpe:/a:igor_sysoev:nginx:0.5.0 cpe:/a:igor_sysoev:nginx:0.4.9 cpe:/a:igor_sysoev:nginx:0.4.8 cpe:/a:igor_sysoev:nginx:0.4.7 cpe:/a:igor_sysoev:nginx:0.4.6 cpe:/a:igor_sysoev:nginx:0.4.5 cpe:/a:igor_sysoev:nginx:0.4.4 cpe:/a:igor_sysoev:nginx:0.4.3 cpe:/a:igor_sysoev:nginx:0.4.2 cpe:/a:igor_sysoev:nginx:0.4.14 cpe:/a:igor_sysoev:nginx:0.4.13 cpe:/a:igor_sysoev:nginx:0.4.12 cpe:/a:igor_sysoev:nginx:0.4.11 cpe:/a:igor_sysoev:nginx:0.4.10 cpe:/a:igor_sysoev:nginx:0.4.1 cpe:/a:igor_sysoev:nginx:0.4.0 cpe:/a:igor_sysoev:nginx:0.3.9 cpe:/a:igor_sysoev:nginx:0.3.8 cpe:/a:igor_sysoev:nginx:0.3.7 cpe:/a:igor_sysoev:nginx:0.3.61 cpe:/a:igor_sysoev:nginx:0.3.60 cpe:/a:igor_sysoev:nginx:0.3.6 cpe:/a:igor_sysoev:nginx:0.3.59 cpe:/a:igor_sysoev:nginx:0.3.58 cpe:/a:igor_sysoev:nginx:0.3.57 cpe:/a:igor_sysoev:nginx:0.3.56 cpe:/a:igor_sysoev:nginx:0.3.55 cpe:/a:igor_sysoev:nginx:0.3.54 cpe:/a:igor_sysoev:nginx:0.3.53 cpe:/a:igor_sysoev:nginx:0.3.52 cpe:/a:igor_sysoev:nginx:0.3.51 cpe:/a:igor_sysoev:nginx:0.3.50 cpe:/a:igor_sysoev:nginx:0.3.5 cpe:/a:igor_sysoev:nginx:0.3.49 cpe:/a:igor_sysoev:nginx:0.3.48 cpe:/a:igor_sysoev:nginx:0.3.47 cpe:/a:igor_sysoev:nginx:0.3.46 cpe:/a:igor_sysoev:nginx:0.3.45 cpe:/a:igor_sysoev:nginx:0.3.44 cpe:/a:igor_sysoev:nginx:0.3.43 cpe:/a:igor_sysoev:nginx:0.3.42 cpe:/a:igor_sysoev:nginx:0.3.41 cpe:/a:igor_sysoev:nginx:0.3.40 cpe:/a:igor_sysoev:nginx:0.3.4 cpe:/a:igor_sysoev:nginx:0.3.39 cpe:/a:igor_sysoev:nginx:0.3.38 cpe:/a:igor_sysoev:nginx:0.3.37 cpe:/a:igor_sysoev:nginx:0.3.36 cpe:/a:igor_sysoev:nginx:0.3.35 cpe:/a:igor_sysoev:nginx:0.3.34 cpe:/a:igor_sysoev:nginx:0.3.33 cpe:/a:igor_sysoev:nginx:0.3.32 cpe:/a:igor_sysoev:nginx:0.3.31 cpe:/a:igor_sysoev:nginx:0.3.30 cpe:/a:igor_sysoev:nginx:0.3.3 cpe:/a:igor_sysoev:nginx:0.3.29 cpe:/a:igor_sysoev:nginx:0.3.28 cpe:/a:igor_sysoev:nginx:0.3.27 cpe:/a:igor_sysoev:nginx:0.3.26 cpe:/a:igor_sysoev:nginx:0.3.25 cpe:/a:igor_sysoev:nginx:0.3.24 cpe:/a:igor_sysoev:nginx:0.3.23 cpe:/a:igor_sysoev:nginx:0.3.22 cpe:/a:igor_sysoev:nginx:0.3.21 cpe:/a:igor_sysoev:nginx:0.3.20 cpe:/a:igor_sysoev:nginx:0.3.2 cpe:/a:igor_sysoev:nginx:0.3.19 cpe:/a:igor_sysoev:nginx:0.3.18 cpe:/a:igor_sysoev:nginx:0.3.17 cpe:/a:igor_sysoev:nginx:0.3.16 cpe:/a:igor_sysoev:nginx:0.3.15 cpe:/a:igor_sysoev:nginx:0.3.14 cpe:/a:igor_sysoev:nginx:0.3.13 cpe:/a:igor_sysoev:nginx:0.3.12 cpe:/a:igor_sysoev:nginx:0.3.11 cpe:/a:igor_sysoev:nginx:0.3.10 cpe:/a:igor_sysoev:nginx:0.3.1 cpe:/a:igor_sysoev:nginx:0.3.0 cpe:/a:igor_sysoev:nginx:0.2.6 cpe:/a:igor_sysoev:nginx:0.2.5 cpe:/a:igor_sysoev:nginx:0.2.4 cpe:/a:igor_sysoev:nginx:0.2.3 cpe:/a:igor_sysoev:nginx:0.2.2 cpe:/a:igor_sysoev:nginx:0.2.1 cpe:/a:igor_sysoev:nginx:0.2.0 cpe:/a:igor_sysoev:nginx:0.1.9 cpe:/a:igor_sysoev:nginx:0.1.8 cpe:/a:igor_sysoev:nginx:0.1.7 cpe:/a:igor_sysoev:nginx:0.1.6 cpe:/a:igor_sysoev:nginx:0.1.5 cpe:/a:igor_sysoev:nginx:0.1.45 cpe:/a:igor_sysoev:nginx:0.1.44 cpe:/a:igor_sysoev:nginx:0.1.43 cpe:/a:igor_sysoev:nginx:0.1.42 cpe:/a:igor_sysoev:nginx:0.1.41 cpe:/a:igor_sysoev:nginx:0.1.40 cpe:/a:igor_sysoev:nginx:0.1.4 cpe:/a:igor_sysoev:nginx:0.1.39 cpe:/a:igor_sysoev:nginx:0.1.38 cpe:/a:igor_sysoev:nginx:0.1.37 cpe:/a:igor_sysoev:nginx:0.1.36 cpe:/a:igor_sysoev:nginx:0.1.35 cpe:/a:igor_sysoev:nginx:0.1.34 cpe:/a:igor_sysoev:nginx:0.1.33 cpe:/a:igor_sysoev:nginx:0.1.32 cpe:/a:igor_sysoev:nginx:0.1.31 cpe:/a:igor_sysoev:nginx:0.1.30 cpe:/a:igor_sysoev:nginx:0.1.3 cpe:/a:igor_sysoev:nginx:0.1.29 cpe:/a:igor_sysoev:nginx:0.1.28 cpe:/a:igor_sysoev:nginx:0.1.27 cpe:/a:igor_sysoev:nginx:0.1.26 cpe:/a:igor_sysoev:nginx:0.1.25 cpe:/a:igor_sysoev:nginx:0.1.24 cpe:/a:igor_sysoev:nginx:0.1.23 cpe:/a:igor_sysoev:nginx:0.1.22 cpe:/a:igor_sysoev:nginx:0.1.21 cpe:/a:igor_sysoev:nginx:0.1.20 cpe:/a:igor_sysoev:nginx:0.1.2 cpe:/a:igor_sysoev:nginx:0.1.19 cpe:/a:igor_sysoev:nginx:0.1.18 cpe:/a:igor_sysoev:nginx:0.1.17 cpe:/a:igor_sysoev:nginx:0.1.16 cpe:/a:igor_sysoev:nginx:0.1.15 cpe:/a:igor_sysoev:nginx:0.1.14 cpe:/a:igor_sysoev:nginx:0.1.13 cpe:/a:igor_sysoev:nginx:0.1.12 cpe:/a:igor_sysoev:nginx:0.1.11 cpe:/a:igor_sysoev:nginx:0.1.10 cpe:/a:igor_sysoev:nginx:0.1.1 cpe:/a:igor_sysoev:nginx:0.1.0	342

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/52578
BUGTRAQ	http://seclists.org/bugtraq/2012/Mar/65
CONFIRM	http://nginx.org/download/patch.2012.memory.txt http://nginx.org/en/security_advisories.html http://trac.nginx.org/nginx/changeset/4530/nginx http://trac.nginx.org/nginx/changeset/4531/nginx
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html
GENTOO	http://security.gentoo.org/glsa/glsa-201203-22.xml
MISC	https://bugzilla.redhat.com/show_bug.cgi?id=803856
MLIST	http://www.openwall.com/lists/oss-security/2012/03/15/5 http://www.openwall.com/lists/oss-security/2012/03/15/9
OSVDB	http://osvdb.org/80124
SECTRACK	http://www.securitytracker.com/id?1026827
SECUNIA	http://secunia.com/advisories/48465 http://secunia.com/advisories/48577
XF	http://xforce.iss.net/xforce/xfdb/74191

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 22:35:11	Multiple Updates

Type	Count
CPE ID(s)	342

Related	Severity
GLSA-201203-22	(Medium)
MDVSA-2012:043	(Medium)
DSA-2434	(Medium)

Same Subject	Severity
Login to view 4 more Alert(s)

CVE-2012-1180

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

COMPANY

STANDARDS

RECENT POSTS

MENU