CVE-2012-1105

概要

参考情報

• openwall.com/lists/oss-security/2012/03/05/7 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLog · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2012-1105 · Third Party Advisory
• securityfocus.com/bid/52280 · Third Party Advisory

phpcas のその他の脆弱性

• CVE-2022-39369高 8.0phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) ser…
• CVE-2014-4172緊急 9.8A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client be…
• CVE-2012-1104中 5.3A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
• CVE-2017-1000071高 8.1Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against a…
• CVE-2012-5583中 5.8phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field…