Lucene search
Alpine Linux Development TeamALPINE:CVE-2016-1000111HistoryMar 11, 2020 - 8:15 p.m.
CVE-2016-1000111
2020-03-1120:15:00
Alpine Linux Development Team
security.alpinelinux.org
7
0.004 Low
EPSS
Percentile
73.4%
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application’s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an “httpoxy” issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.11-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.12-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.13-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | py3-twisted | < 16.4.0-r0 | UNKNOWN |
Related
nessus
nessus
CentOS 6 / 7 : python-twisted-web (CESA-2016:1978)
2016-09-30 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : Twisted vulnerability (USN-3585-1)
2018-03-06 00:00:00
Amazon Linux AMI : python-twisted-web (ALAS-2016-760)
2016-10-28 00:00:00
centos
centos
python security update
2016-09-29 18:58:54
ubuntucve
ubuntucve
CVE-2016-1000111
2016-07-18 00:00:00
oraclelinux
oraclelinux
python-twisted-web security update
2016-09-29 00:00:00
redhatcve
redhatcve
CVE-2016-1000111
2016-07-18 14:49:03
osv
osv
Forced Browsing in Twisted
2021-04-30 17:32:28
PYSEC-2020-214
2020-03-11 20:15:00
CVE-2016-1000111
2020-03-11 20:15:11
veracode
veracode
Httpoxy Vulnerability Through CGI Servlet
2017-04-07 05:46:38
Httpoxy Vulnerability Through CGI Servlet
2019-01-15 09:13:37
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0114-1)
2021-06-09 00:00:00
CentOS Update for python-twisted-web CESA-2016:1978 centos6
2016-10-05 00:00:00
CentOS Update for python-twisted-web CESA-2016:1978 centos7
2016-10-05 00:00:00
cve
cve
CVE-2016-1000111
2020-03-11 20:15:00
cvelist
cvelist
CVE-2016-1000111
2020-03-11 19:05:31
prion
prion
Design/Logic Flaw
2020-03-11 20:15:00
redhat
redhat
(RHSA-2016:1978) Important: python-twisted-web security update
2016-09-29 18:08:04
ubuntu
ubuntu
Twisted vulnerability
2018-03-05 00:00:00
debiancve
debiancve
CVE-2016-1000111
2020-03-11 20:15:00
amazon
amazon
Important: python-twisted-web
2016-10-27 17:00:00
mageia
mageia
Updated python-twisted-web packages fix a security vulnerability
2016-10-12 16:46:10
github
github
Forced Browsing in Twisted
2021-04-30 17:32:28