← Back

CVE-2012-4023

nvd nist
Published: Nov 8, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected (48)

Products: Simon Brown: Pebble
1 product
Pebble
Configuration A
48 vulnerable
Vulnerable SoftwareAffected Versions
Simon Brown
Up to 2.6.3
Version 1.0
Version 1.1
Version 1.2
Version 1.3
Version 1.4.1
Version 1.4.2
Version 1.4
Version 1.4 beta1
Version 1.4 beta2
Version 1.4 beta3
Version 1.5.1
Version 1.5
Version 1.5 beta1
Version 1.5 beta2
Version 1.6 beta3
Version 1.7.1
Version 1.7.2
Version 1.7
Version 1.7 beta1
Version 1.8
Version 1.9
Version 2.0.0 m1
Version 2.0.0 m2
Version 2.0.0 m3
Version 2.0.0 rc1
Version 2.0.0 rc2
Version 2.0.1
Version 2.0
Version 2.1
Version 2.1 rc1
Version 2.2
Version 2.3.1
Version 2.3.2
Version 2.3
Version 2.4
Version 2.4 rc2
Version 2.5.1
Version 2.5.2
Version 2.5.3
Version 2.5
Version 2.5 m1
Version 2.5 m2
Version 2.5 rc1
Version 2.6.1
Version 2.6.2
Version 2.6
Version 2.6 m1

References (6)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.