| Name | CVE-2012-1050 |
| Description | Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 660627 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| mathopd | source | (unstable) | (unfixed) | low | | 660627 |
Notes
[lenny] - mathopd <no-dsa> (Minor issue, configuration specific)
[squeeze] - mathopd <no-dsa> (Minor issue, configuration specific)
this is only an issue in specific configurations but not in the Debian configuration