CVE-2017-5615

Опубликовано: 03 мар. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

Ссылки

http://www.openwall.com/lists/oss-security/2017/01/28/8
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95870
Third Party Advisory
VDB Entry
https://news.cpanel.com/tsr-2017-0001-full-disclosure/
Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/8
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/95870
Third Party Advisory
VDB Entry
https://news.cpanel.com/tsr-2017-0001-full-disclosure/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cpanel:cgiecho:-:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cgiemail:-:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00279

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2017-5615

CVSS3: 6.1

ubuntu

почти 9 лет назад

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

CVE-2017-5615

CVSS3: 6.1

debian

почти 9 лет назад

cgiemail and cgiecho allow remote attackers to inject HTTP headers via ...

GHSA-r88j-2w5r-2c6x

CVSS3: 6.1

github

больше 3 лет назад

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

EPSS

Процентиль: 51%

0.00279

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601