CVE-2012-2751

ModSecurity < 2.6.6 - Filter Bypass via Single Quote in Multipart Content-Disposition

Title source: llm

Description

ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031.

References (16)

Core 16

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/54156

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2012/dsa-2506

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html

Broken Link x_refsource_confirm

http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.6.x/CHANGES

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49782

Broken Link x_refsource_confirm

http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?r1=1918&r2=1917&pathrev=1918

Third Party Advisory x_refsource_misc

http://blog.ivanristic.com/2012/06/modsecurity-and-modsecurity-core-rule-set-multipart-bypasses.html

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2012/06/22/2

Third Party Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

Broken Link x_refsource_confirm

http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/CHANGES?r1=1920&r2=1919&pathrev=1920

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2012/06/22/1

Third Party Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2012:118

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49576

Third Party Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html

Scores

EPSS 0.0330

EPSS Percentile 87.2%

Details

Status published

Products (7)

debian/debian_linux 6.0

debian/debian_linux 7.0

opensuse/opensuse 11.4

opensuse/opensuse 12.2

opensuse/opensuse 12.3

oracle/http_server 11.1.1.6.0

trustwave/modsecurity < 2.6.6

Published Jul 22, 2012

Tracked Since Feb 18, 2026