SecuritySpace - CVE-2012-1605

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-1605

Description: The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

Test IDs: 1.3.6.1.4.1.25623.1.0.803997

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-1605
BugTraq ID: 52771
http://www.securityfocus.com/bid/52771
http://www.openwall.com/lists/oss-security/2012/03/30/4
http://www.osvdb.org/80759

CVE ID:	CVE-2012-1605
Description:	The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."
Test IDs:	1.3.6.1.4.1.25623.1.0.803997
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1605 BugTraq ID: 52771 http://www.securityfocus.com/bid/52771 http://www.openwall.com/lists/oss-security/2012/03/30/4 http://www.osvdb.org/80759