Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-5526

Опубликовано: 12 нояб. 2012
Источник: redhat
CVSS2: 2.6
EPSS Низкий

Описание

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=877015perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers

EPSS

Процентиль: 82%
0.0172
Низкий

2.6 Low

CVSS2

Связанные уязвимости

ubuntu
почти 13 лет назад

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

nvd
почти 13 лет назад

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

debian
почти 13 лет назад

CGI.pm module before 3.63 for Perl does not properly escape newlines i ...

github
больше 3 лет назад

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

fstec
почти 13 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации

EPSS

Процентиль: 82%
0.0172
Низкий

2.6 Low

CVSS2