Lucene search
MitreCVELIST:CVE-2011-2766HistorySep 23, 2011 - 10:00 a.m.
CVE-2011-2766
2011-09-2310:00:00
mitre
www.cve.org
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479
www.debian.org/security/2011/dsa-2327
www.mandriva.com/security/advisories?name=MDVSA-2012:001
www.openwall.com/lists/oss-security/2011/09/08/1
www.openwall.com/lists/oss-security/2011/09/08/2
www.securityfocus.com/bid/49549
bugzilla.redhat.com/show_bug.cgi?id=736604
exchange.xforce.ibmcloud.com/vulnerabilities/69709
hermes.opensuse.org/messages/13154637
hermes.opensuse.org/messages/13155253
rt.cpan.org/Public/Bug/Display.html?id=68380
Related
nessus
nessus
openSUSE Security Update : FastCGI (openSUSE-2011-102)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : fcgi (MDVSA-2012:001)
2012-01-03 00:00:00
Amazon Linux AMI : perl-FCGI (ALAS-2011-5)
2014-10-12 00:00:00
openvas
openvas
Mandriva Update for fcgi MDVSA-2012:001 (fcgi)
2012-01-09 00:00:00
Debian Security Advisory DSA 2327-1 (libfcgi-perl)
2012-02-11 00:00:00
Fedora Update for perl-FCGI FEDORA-2011-13130
2012-04-02 00:00:00
ubuntucve
ubuntucve
CVE-2011-2766
2011-09-23 00:00:00
debiancve
debiancve
CVE-2011-2766
2011-09-23 10:55:03
amazon
amazon
Medium: perl-FCGI
2011-10-10 23:48:00
debian
debian
[SECURITY] [DSA 2327-1] libfcgi-perl security-update
2011-10-24 18:16:30
cve
cve
CVE-2011-2766
2011-09-23 10:55:03
fedora
fedora
[SECURITY] Fedora 16 Update: perl-FCGI-0.74-1.fc16
2011-10-02 18:17:56
[SECURITY] Fedora 15 Update: perl-FCGI-0.74-1.fc15
2011-10-02 23:03:42
[SECURITY] Fedora 14 Update: perl-FCGI-0.74-1.fc14
2011-10-02 22:58:12
prion
prion
Authentication flaw
2011-09-23 10:55:00
nvd
nvd
CVE-2011-2766
2011-09-23 10:55:03