ID | CVE-2012-0216 | ||||||
Sažetak | The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server. | ||||||
Reference | |||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:L/AC:M/Au:N/C:P/I:P/A:P | ||||||
Zadnje važnije ažuriranje | 29-04-2025 - 21:13 | ||||||
Objavljeno | 22-04-2012 - 18:55 |