{"api_version":"1","generated_at":"2026-07-23T03:59:24+00:00","cve":"CVE-2012-2969","urls":{"html":"https://cve.report/CVE-2012-2969","api":"https://cve.report/api/cve/CVE-2012-2969.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-2969","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2969"},"summary":{"title":"CVE-2012-2969","description":"Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.","state":"PUBLISHED","assigner":"certcc","published_at":"2012-08-12 16:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://en.securitylab.ru/lab/","name":"http://en.securitylab.ru/lab/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Исследовательский центр Positive Research","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://en.securitylab.ru/lab/PT-2012-05","name":"http://en.securitylab.ru/lab/PT-2012-05","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Vulnerabilities","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/309979","name":"http://www.kb.cert.org/vuls/id/309979","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#309979 - Caucho's Quercus on Resin contains multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://caucho.com/resin-4.0/changes/changes.xtp","name":"http://caucho.com/resin-4.0/changes/changes.xtp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Resin : Changes : Resin Change Log","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2969","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2969","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"2.1.snap","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.1","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.2","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"3.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"4.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2969","vulnerable":"1","versionEndIncluding":"4.0.28","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"caucho","cpe5":"resin","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T19:50:05.270Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"VU#309979","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/309979"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://en.securitylab.ru/lab/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://en.securitylab.ru/lab/PT-2012-05"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://caucho.com/resin-4.0/changes/changes.xtp"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2012-08-12T16:00:00.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"VU#309979","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/309979"},{"tags":["x_refsource_MISC"],"url":"http://en.securitylab.ru/lab/"},{"tags":["x_refsource_MISC"],"url":"http://en.securitylab.ru/lab/PT-2012-05"},{"tags":["x_refsource_MISC"],"url":"http://caucho.com/resin-4.0/changes/changes.xtp"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2012-2969","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"VU#309979","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/309979"},{"name":"http://en.securitylab.ru/lab/","refsource":"MISC","url":"http://en.securitylab.ru/lab/"},{"name":"http://en.securitylab.ru/lab/PT-2012-05","refsource":"MISC","url":"http://en.securitylab.ru/lab/PT-2012-05"},{"name":"http://caucho.com/resin-4.0/changes/changes.xtp","refsource":"MISC","url":"http://caucho.com/resin-4.0/changes/changes.xtp"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2012-2969","datePublished":"2012-08-12T16:00:00.000Z","dateReserved":"2012-05-30T00:00:00.000Z","dateUpdated":"2024-09-17T00:16:39.741Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-08-12 16:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.28","matchCriteriaId":"BB62BA5C-7827-40AA-9D83-E4AEA482395B"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A4A9A59D-6C5A-4917-857E-D183B6982EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"457E68AD-E7F1-4845-9CBE-0FA4D8A8D946"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A334508B-849A-45D3-B83D-E0AE5AB4A601"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"60930A08-2692-4809-89B7-3B2FB5CEF7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"85003E89-F293-4846-AA6C-047FD3178333"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C34209E9-E33F-49C7-A298-61EEBAE77C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD3720FA-6136-48D0-82B8-513EFC26D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"08F7C559-7B3D-44E2-8A22-58FA021E3EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B47B8CB3-C2ED-4E37-84DE-8018114CFE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"54379312-A5E3-41DA-A50C-554C8787FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3AF6E9A6-5F37-4443-8D64-9C173DABDCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F9759471-88B7-43D8-81AA-DFC74AE49563"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"70210B6F-B3E1-41F7-883C-4A449A480B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CE141992-980B-4021-80B1-694DB3F21D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2079B923-2976-46BB-A28F-674EAFCCA426"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"21AEF4E3-E4AE-4053-A332-D8773F7BEC38"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"EACB10DA-9825-4D86-AD90-07CE961915A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"9F12E529-14C8-4251-855D-88E3DC3BD71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DD14F784-48E0-4F84-8F81-6AEC1A112249"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.13:*:*:*:*:*:*:*","matchCriteriaId":"AEEF7D28-7E47-458D-9366-A916032F0594"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.14:*:*:*:*:*:*:*","matchCriteriaId":"8E0C1155-4E40-4597-96CF-F6BCDF2C979F"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.15:*:*:*:*:*:*:*","matchCriteriaId":"E0651EE5-BFB1-41C7-B1F4-D61A19D98EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"31C49426-91D0-4505-88FD-19E216333C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.snap:*:*:*:*:*:*:*","matchCriteriaId":"ED74BDDE-5978-4F48-A460-D0A7BD54154C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1B781357-4F5F-45E9-B2AC-8C91C7BBD759"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"D18C7FAC-3AC3-461A-B94E-4C4E516F79EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"D6E82173-38B3-44F7-9B21-BD176AD401AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C709DB7B-64BC-4CAC-9900-86B4B8C65D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B19E7FA9-48A2-452E-9A88-6DDCFA5F04EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1C6D56BA-0115-4F94-900F-C7246CBAFB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2A6766F1-DAEF-4B46-A437-70A0DA796CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0C87B844-CB4F-432C-BB95-0BFFE21F70FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7AE0B374-65DC-41A1-BD26-484BEDCC208D"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"318C85EA-0F00-4306-887F-9A2111C45736"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C3348884-8D55-4A51-BB9B-94339A20F706"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"AD4A98DE-00B4-4211-A4D1-D88DA34E3832"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"04D7A448-ECCA-48D8-BBF1-ABBF2F1FD791"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"34C6864E-414B-464E-BC17-36B554A5EE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"9CBB81A1-3CDD-4890-B19B-C4E4DFC7FC62"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"AB00A312-45F7-4C66-AAF5-C952DB8FFEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"75B7A1C6-AF66-4CF2-A2D9-3D9E0F1B78B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1E4E9AF1-F863-4319-BB96-9E6CAA8FAB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"976D2F97-5EA3-45EC-91C2-33B8081F7260"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"D43ABA6E-5061-498C-A68C-44C6942DD96E"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"6CB83B0F-A221-4CDA-83FC-CC8FE740AE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ED9ACA71-58A4-4506-83E6-36E8C09DF1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"859A606A-3327-4884-B7F4-769B32400D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"93A3F13E-272A-4FDA-AA54-BD75BE78C393"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D4BE4593-C422-46D1-8F4E-293C508B5D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3791E1F7-8776-48DE-B918-18DB08D6F652"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9F397825-AA09-4F34-821C-B567B04FCB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4F18F7E1-DB6D-4FA8-81C2-05EC23DE46D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"88CD809F-AFC5-40CD-B709-E797174FA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9FF07CD8-6479-464E-A3CB-0F680C34461C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"0146DE06-1B29-4344-A6A6-34D627E407F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D56CE194-BC17-40B7-8775-DD267731B9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"B9EF1405-8B4E-4314-8A9D-19B3CAF15229"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"5FD16B09-AC60-4296-A523-94F960985A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1152C994-7446-43F8-90D7-4298F81C5454"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"32D0F9D9-84D7-4F04-8432-9560BBC8B529"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E04F2867-324D-451D-ABB9-A74678110777"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89500B66-3459-46E9-A0EC-D32AF212EAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"80B7FCA8-6C17-4C5B-98A0-C44B5338D84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"801FA247-802F-4387-9A56-50ACE7440599"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1E02F8DF-0680-47DD-9773-80CA8BBA9947"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"82BCE2FC-EE12-4B58-8B26-1EBAD3614A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"89008076-FA94-430E-9AD5-8F53D5114421"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4BA9823D-9330-4E05-803B-C336B43FB0C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"512714F0-E392-472F-A520-D3EF690BB2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5ACB49A3-9A0B-4C4C-949B-B569C2049B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3EBF56AD-F93B-4370-A850-7046DE36591A"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"DAFD4305-8A81-4C31-B97A-06F063A16827"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BB7697BE-FF95-46DF-9DD1-5D114B0151BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"3D3ABF12-D4C0-4D0A-8FBD-13F596B5CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"BE6BE8DB-6CCF-48CC-8992-546BBEE56050"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"7A9E8929-07DE-4525-95C3-24C63FB77AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"CF191346-0D21-4773-B0BF-2FBAEC78731C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"76C26F87-0FD8-4252-8EE6-2D34FC42D441"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"41325FF5-F3FC-4F2E-8EA6-41EEAA8AC724"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"70990ADF-5ABE-4C69-8ECA-F725119F0C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"6CAA2934-AA3A-4AD3-ACCD-96B66BAC1C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.22:*:*:*:*:*:*:*","matchCriteriaId":"39C70610-2570-4DE1-9FAC-971C5234208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"6A70AAE6-EB10-4544-BFD1-6679D86D8FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"0813C483-FDFD-4CA0-AEB5-110959D27DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"82A5CBB1-F008-473F-973D-C77FF7ACE18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"7E1F3562-660A-46D8-AF58-F30E37C71C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:4.0.27:*:*:*:*:*:*:*","matchCriteriaId":"14DA8A16-B6DB-443C-8A6E-8055DA2AA38F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"2969","Ordinal":"1","Title":"CVE-2012-2969","CVE":"CVE-2012-2969","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"2969","Ordinal":"1","NoteData":"Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.","Type":"Description","Title":"CVE-2012-2969"},{"CveYear":"2012","CveId":"2969","Ordinal":"2","NoteData":"2012-08-12","Type":"Other","Title":"Published"}]}}}