CVE-2012-1050

Description

Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73049

http://www.securitytracker.com/id?1026641

http://www.mathopd.org/security.html

http://www.mail-archive.com/mathopd%40mathopd.org/msg00392.html

http://secunia.com/advisories/47908

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3