Caucho Technology Resin 4.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:caucho:resin:4.0.1:*:*:*:*:*:*:*part: a version: 4.0.1 update: *
| Vendor | Caucho (878d3a88-2d3e-52e7-94ee-bbf031d4e0b6) |
|---|---|
| Product | Resin (ba9b4b05-dfd5-5176-b5c6-e66123ca3440) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2969 |
vulnerable | 2026-06-08 05:02:07.470088 |
Details available
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
Published: 2012-08-12T16:00:00.000Z
Updated: 2024-09-17T00:16:39.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2968 |
vulnerable | 2026-06-08 05:02:07.467889 |
Details available
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
Published: 2012-08-12T16:00:00.000Z
Updated: 2024-09-17T00:50:54.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2967 |
vulnerable | 2026-06-08 05:02:07.465713 |
Details available
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
Published: 2012-08-12T16:00:00.000Z
Updated: 2024-09-17T00:41:22.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2966 |
vulnerable | 2026-06-08 05:02:07.463504 |
Details available
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
Published: 2012-08-12T16:00:00.000Z
Updated: 2024-09-16T22:14:49.159Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2965 |
vulnerable | 2026-06-08 05:02:07.448637 |
Details available
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
Published: 2012-08-12T16:00:00.000Z
Updated: 2024-09-16T20:52:28.420Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.