PT-2010-5487 · Cgi.Pm · Cgi.Pm

Michal Zalewski · Published 2010-12-06 · Updated 2024-06-15 · CVE-2010-4411

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CGI.pm versions 3.50 and earlier

Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This problem exists due to an incomplete fix for a previous issue.

Recommendations For versions 3.50 and earlier, update to a version later than 3.50 to resolve the issue.

Fix

Related Identifiers

CVE-2010-4411

OPENSUSE-SU-2024:10449-1

OPENSUSE-SU-2024:10545-1

Affected Products

Cgi.Pm

References · 25

• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4411 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4411 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10449-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10545-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-4411 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:008 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-4411 · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/12/01/3 · Note
• http://bugzilla.org/security/3.2.9 · Note
• http://vupen.com/english/advisories/2011/0212 · Note
• http://secunia.com/advisories/43033 · Note