CVE-2012-3467

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
apacheqpid
𝑥
≤ 0.16
apacheqpid
0.5
apacheqpid
0.6
apacheqpid
0.14
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qpid-cpp
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
not-affected
raring
not-affected
quantal
Fixed 0.16-7ubuntu1
released
precise
ignored
oneiric
dne
natty
dne
lucid
dne
hardy
dne
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2012-1277.html
http://rhn.redhat.com/errata/RHSA-2012-1279.html
http://secunia.com/advisories/50186
http://secunia.com/advisories/50698
http://svn.apache.org/viewvc?view=revision&revision=1352992
http://www.openwall.com/lists/oss-security/2012/08/09/6
http://www.securityfocus.com/bid/54954
https://bugzilla.redhat.com/show_bug.cgi?id=836276
https://exchange.xforce.ibmcloud.com/vulnerabilities/77568
https://issues.apache.org/jira/browse/QPID-3849
http://rhn.redhat.com/errata/RHSA-2012-1277.html
http://rhn.redhat.com/errata/RHSA-2012-1279.html
http://secunia.com/advisories/50186
http://secunia.com/advisories/50698
http://svn.apache.org/viewvc?view=revision&revision=1352992
http://www.openwall.com/lists/oss-security/2012/08/09/6
http://www.securityfocus.com/bid/54954
https://bugzilla.redhat.com/show_bug.cgi?id=836276
https://exchange.xforce.ibmcloud.com/vulnerabilities/77568
https://issues.apache.org/jira/browse/QPID-3849