Severity : Medium Published : 2012-01-27 Modified : 2013-06-04 Base Score : 4.3 Details : protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script. Product/Version : CGE 5.x   Mobilinux 5.x   Pro 5.0

CVE-2012-4565 CVE-2012-4508 CVE-2012-4444 CVE-2012-4423 CVE-2012-3524 CVE-2012-3511 CVE-2012-3509 CVE-2012-3417 CVE-2012-3401 CVE-2012-3400 CVE-2012-2333 CVE-2012-2319 CVE-2012-2313 CVE-2012-2141 CVE-2012-2131 CVE-2012-2123 CVE-2012-2111 CVE-2012-2110 CVE-2012-2100 CVE-2012-1667 CVE-2012-1182 CVE-2012-1165 CVE-2012-1164 CVE-2012-1146 CVE-2012-1097 CVE-2012-0884 CVE-2012-0879 CVE-2012-0840 CVE-2012-0815 CVE-2012-0814 CVE-2012-0061 CVE-2012-0060 CVE-2012-0053 CVE-2012-0044 CVE-2012-0038 CVE-2012-0031 CVE-2012-0029 CVE-2012-0028 CVE-2012-0027