CVE-2014-3941

Опубликовано: 03 июн. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00276

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-3941

ubuntu

больше 11 лет назад

CVE-2014-3941

debian

больше 11 лет назад

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6 ...

GHSA-594h-cx6w-p4jf

github

больше 3 лет назад

Typo3 Host Header Spoofing Vulnerability

openSUSE-SU-2016:2114-1

suse-cvrf

больше 9 лет назад

Security update for typo3-cms-4_7

EPSS

Процентиль: 51%

0.00276

Низкий

5 Medium

CVSS2

Дефекты

CWE-20