CVE-2014-3941

Upstream information

CVE-2014-3941 at MITRE

Description

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	Partial
Availability Impact	None

SUSE Bugzilla entries: 1082714 [RESOLVED / FIXED], 881282 [RESOLVED / FIXED]

SUSE Security Advisories:

• openSUSE-SU-2014:0813-1, published Wed, 18 Jun 2014 12:04:12 +0200 (CEST)
• openSUSE-SU-2016:2025-1, published Wed, 10 Aug 2016 22:09:17 +0200 (CEST)
• openSUSE-SU-2016:2114-1, published Fri, 19 Aug 2016 19:09:32 +0200 (CEST)

---

SUSE Timeline for this CVE

CVE page created: Tue Jun 3 19:49:40 2014
CVE page last modified: Fri Oct 7 12:46:49 2022