Vulnerability Description
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting (XSS) attacks, gain privileges, or obtain sensitive information via vectors involving localhost HTTP requests to the Apache HTTP Server.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | 6.0 |
References
- http://www.debian.org/security/2012/dsa-2452Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75211Third Party Advisory
- http://www.debian.org/security/2012/dsa-2452Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75211Third Party Advisory
FAQ
What is CVE-2012-0216?
CVE-2012-0216 is a vulnerability with a CVSS score of 4.4 (MEDIUM). The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when mod_php or mod_rivet is used, provides exam...
How severe is CVE-2012-0216?
CVE-2012-0216 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-0216?
Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux.