CVE-2012-6339

Exploit

EPSS 1.19%
Veröffentlicht 31.12.2012 11:50:28
Zuletzt bearbeitet 16.06.2026 23:48:01
Erkennungen
Login

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 132 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cerberusftp ≫ Ftp Server Version <= 5.0.5.1

Cerberusftp ≫ Ftp Server Version 1.0 Update -

Cerberusftp ≫ Ftp Server Version 1.01

Cerberusftp ≫ Ftp Server Version 1.1

Cerberusftp ≫ Ftp Server Version 1.2

Cerberusftp ≫ Ftp Server Version 1.02

Cerberusftp ≫ Ftp Server Version 1.03

Cerberusftp ≫ Ftp Server Version 1.5

Cerberusftp ≫ Ftp Server Version 1.05

Cerberusftp ≫ Ftp Server Version 1.6 Update beta

Cerberusftp ≫ Ftp Server Version 1.7

Cerberusftp ≫ Ftp Server Version 1.22

Cerberusftp ≫ Ftp Server Version 1.71

Cerberusftp ≫ Ftp Server Version 2.0

Cerberusftp ≫ Ftp Server Version 2.0 Update beta1

Cerberusftp ≫ Ftp Server Version 2.0 Update beta2

Cerberusftp ≫ Ftp Server Version 2.0 Update beta3

Cerberusftp ≫ Ftp Server Version 2.0 Update beta4

Cerberusftp ≫ Ftp Server Version 2.1

Cerberusftp ≫ Ftp Server Version 2.01

Cerberusftp ≫ Ftp Server Version 2.02

Cerberusftp ≫ Ftp Server Version 2.2

Cerberusftp ≫ Ftp Server Version 2.02 Update beta

Cerberusftp ≫ Ftp Server Version 2.2 Update beta1

Cerberusftp ≫ Ftp Server Version 2.2 Update beta2

Cerberusftp ≫ Ftp Server Version 2.2 Update beta3

Cerberusftp ≫ Ftp Server Version 2.3

Cerberusftp ≫ Ftp Server Version 2.4

Cerberusftp ≫ Ftp Server Version 2.4 Update beta1

Cerberusftp ≫ Ftp Server Version 2.4 Update beta2

Cerberusftp ≫ Ftp Server Version 2.4 Update beta3

Cerberusftp ≫ Ftp Server Version 2.11

Cerberusftp ≫ Ftp Server Version 2.11 Update beta

Cerberusftp ≫ Ftp Server Version 2.11 Update beta2

Cerberusftp ≫ Ftp Server Version 2.15

Cerberusftp ≫ Ftp Server Version 2.15 Update beta

Cerberusftp ≫ Ftp Server Version 2.16

Cerberusftp ≫ Ftp Server Version 2.21

Cerberusftp ≫ Ftp Server Version 2.22

Cerberusftp ≫ Ftp Server Version 2.23 Update beta

Cerberusftp ≫ Ftp Server Version 2.31

Cerberusftp ≫ Ftp Server Version 2.32

Cerberusftp ≫ Ftp Server Version 2.41

Cerberusftp ≫ Ftp Server Version 2.42

Cerberusftp ≫ Ftp Server Version 2.43

Cerberusftp ≫ Ftp Server Version 2.44

Cerberusftp ≫ Ftp Server Version 2.45

Cerberusftp ≫ Ftp Server Version 2.46

Cerberusftp ≫ Ftp Server Version 2.47

Cerberusftp ≫ Ftp Server Version 2.48

Cerberusftp ≫ Ftp Server Version 2.49

Cerberusftp ≫ Ftp Server Version 2.50

Cerberusftp ≫ Ftp Server Version 3.0

Cerberusftp ≫ Ftp Server Version 3.0.1

Cerberusftp ≫ Ftp Server Version 3.0.2

Cerberusftp ≫ Ftp Server Version 3.0.3

Cerberusftp ≫ Ftp Server Version 3.0.4

Cerberusftp ≫ Ftp Server Version 3.0.5

Cerberusftp ≫ Ftp Server Version 3.0.6

Cerberusftp ≫ Ftp Server Version 3.0.7

Cerberusftp ≫ Ftp Server Version 3.0.7.1

Cerberusftp ≫ Ftp Server Version 3.0.8

Cerberusftp ≫ Ftp Server Version 3.1

Cerberusftp ≫ Ftp Server Version 3.1.0.3

Cerberusftp ≫ Ftp Server Version 3.1.0.4

Cerberusftp ≫ Ftp Server Version 3.1.0.5

Cerberusftp ≫ Ftp Server Version 3.1.1

Cerberusftp ≫ Ftp Server Version 3.1.2

Cerberusftp ≫ Ftp Server Version 3.1.3

Cerberusftp ≫ Ftp Server Version 3.1.3.1

Cerberusftp ≫ Ftp Server Version 3.1.4

Cerberusftp ≫ Ftp Server Version 4.0.0

Cerberusftp ≫ Ftp Server Version 4.0.0.6

Cerberusftp ≫ Ftp Server Version 4.0.0.8

Cerberusftp ≫ Ftp Server Version 4.0.0.9

Cerberusftp ≫ Ftp Server Version 4.0.0.11

Cerberusftp ≫ Ftp Server Version 4.0.1

Cerberusftp ≫ Ftp Server Version 4.0.1.1

Cerberusftp ≫ Ftp Server Version 4.0.2

Cerberusftp ≫ Ftp Server Version 4.0.2.2

Cerberusftp ≫ Ftp Server Version 4.0.3.0

Cerberusftp ≫ Ftp Server Version 4.0.3.1

Cerberusftp ≫ Ftp Server Version 4.0.3.2

Cerberusftp ≫ Ftp Server Version 4.0.3.3

Cerberusftp ≫ Ftp Server Version 4.0.4.0

Cerberusftp ≫ Ftp Server Version 4.0.4.1

Cerberusftp ≫ Ftp Server Version 4.0.4.2

Cerberusftp ≫ Ftp Server Version 4.0.4.3

Cerberusftp ≫ Ftp Server Version 4.0.5

Cerberusftp ≫ Ftp Server Version 4.0.5.2

Cerberusftp ≫ Ftp Server Version 4.0.5.3

Cerberusftp ≫ Ftp Server Version 4.0.5.4

Cerberusftp ≫ Ftp Server Version 4.0.5.5

Cerberusftp ≫ Ftp Server Version 4.0.6

Cerberusftp ≫ Ftp Server Version 4.0.7

Cerberusftp ≫ Ftp Server Version 4.0.7.2

Cerberusftp ≫ Ftp Server Version 4.0.7.3

Cerberusftp ≫ Ftp Server Version 4.0.7.5

Cerberusftp ≫ Ftp Server Version 4.0.7.6

Cerberusftp ≫ Ftp Server Version 4.0.8.0

Cerberusftp ≫ Ftp Server Version 4.0.8.1

Cerberusftp ≫ Ftp Server Version 4.0.8.3

Cerberusftp ≫ Ftp Server Version 4.0.9.0

Cerberusftp ≫ Ftp Server Version 4.0.9.1

Cerberusftp ≫ Ftp Server Version 4.0.9.2

Cerberusftp ≫ Ftp Server Version 4.0.9.3

Cerberusftp ≫ Ftp Server Version 4.0.9.4

Cerberusftp ≫ Ftp Server Version 4.0.9.5

Cerberusftp ≫ Ftp Server Version 4.0.9.6

Cerberusftp ≫ Ftp Server Version 4.0.9.7

Cerberusftp ≫ Ftp Server Version 4.0.9.8

Cerberusftp ≫ Ftp Server Version 4.0.10.0

Cerberusftp ≫ Ftp Server Version 4.0.11.0

Cerberusftp ≫ Ftp Server Version 5.0.0.0

Cerberusftp ≫ Ftp Server Version 5.0.0.1

Cerberusftp ≫ Ftp Server Version 5.0.0.2

Cerberusftp ≫ Ftp Server Version 5.0.0.3

Cerberusftp ≫ Ftp Server Version 5.0.0.4

Cerberusftp ≫ Ftp Server Version 5.0.0.5

Cerberusftp ≫ Ftp Server Version 5.0.0.6

Cerberusftp ≫ Ftp Server Version 5.0.0.7

Cerberusftp ≫ Ftp Server Version 5.0.1.0

Cerberusftp ≫ Ftp Server Version 5.0.1.1

Cerberusftp ≫ Ftp Server Version 5.0.1.2

Cerberusftp ≫ Ftp Server Version 5.0.2.0

Cerberusftp ≫ Ftp Server Version 5.0.3.0

Cerberusftp ≫ Ftp Server Version 5.0.3.1

Cerberusftp ≫ Ftp Server Version 5.0.4.0

Cerberusftp ≫ Ftp Server Version 5.0.4.1

Cerberusftp ≫ Ftp Server Version 5.0.4.2

Cerberusftp ≫ Ftp Server Version 5.0.4.3

Cerberusftp ≫ Ftp Server Version 5.0.5.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.638

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.cerberusftp.com/products/releasenotes.html

http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html

http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-6339

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-6339

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-6339

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-6339