Описание
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.74-1 |
| hardy | not-affected | |
| lucid | not-affected | |
| maverick | released | 0.71-1+squeeze1build0.10.10.1 |
| natty | released | 0.71-1+squeeze1build0.11.04.1 |
| oneiric | ignored | end of life |
| precise | not-affected | 0.74-1 |
| quantal | not-affected | 0.74-1 |
| raring | not-affected | 0.74-1 |
| upstream | released | 0.73-2 |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
Связанные уязвимости
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by ...
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
7.5 High
CVSS2