CVE-2014-3875

概要

参考情報

• packetstormsecurity.com/files/126906/F-EX-20140313-1-HTTP-Response-Splitting-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2014/Jun/1 · Exploit
• openwall.com/lists/oss-security/2014/06/03/6 · Exploit
• securityfocus.com/bid/67783 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2014-3875 · Third Party Advisory

fex のその他の脆弱性

• CVE-2014-3877中 4.3Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross…
• CVE-2014-3876中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allow remote attackers …
• CVE-2012-1293中 4.3Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attac…
• CVE-2012-0869中 4.3Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows remote attackers to inje…
• CVE-2011-1409中 5.0Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authenti…