Lucene search
RedhatCVELIST:CVE-2016-5387HistoryJul 19, 2016 - 1:00 a.m.
CVE-2016-5387
2016-07-1901:00:00
redhat
raw.githubusercontent.com
2
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application’s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an “httpoxy” issue. NOTE: the vendor states “This mitigation has been assigned the identifier CVE-2016-5387”; in other words, this is not a CVE ID for a vulnerability.
Related
fedora
fedora
[SECURITY] Fedora 23 Update: httpd-2.4.23-4.fc23
2016-07-27 20:56:05
[SECURITY] Fedora 24 Update: httpd-2.4.23-4.fc24
2016-07-22 16:00:58
[SECURITY] Fedora 24 Update: perl-CGI-Emulate-PSGI-0.22-1.fc24
2016-08-08 20:37:39
veracode
veracode
Open Redirection
2019-01-15 09:12:18
nessus
nessus
RHEL 5 / 6 : httpd (RHSA-2016:1421) (httpoxy)
2016-07-19 00:00:00
Fedora 24 : httpd (2016-9fd9bfab9e) (httpoxy)
2016-07-25 00:00:00
Oracle Linux 5 / 6 : httpd (ELSA-2016-1421) (httpoxy)
2016-07-19 00:00:00
osv
osv
CVE-2016-5387
2016-07-19 02:00:00
wordpress - security update
2016-07-29 00:00:00
openvas
openvas
Fedora Update for perl-CGI-Emulate-PSGI FEDORA-2016-a29c65b00f
2016-08-09 00:00:00
Debian: Security Advisory (DLA-553-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 553-1] apache2 security update
2016-07-20 11:30:44
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
debiancve
debiancve
CVE-2016-5387
2016-07-19 02:00:19
ubuntucve
ubuntucve
f5
f5
SOL80513384 - Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 00:00:00
Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 21:36:00
redhat
redhat
(RHSA-2016:1851) Important: Red Hat JBoss Core Services Apache HTTP 2.4.6 Service Pack 1 security update
2016-09-12 16:50:10
(RHSA-2016:1422) Important: httpd security and bug fix update
2016-07-18 14:13:23
(RHSA-2016:1421) Important: httpd security update
2016-07-18 00:00:00
mageia
mageia
Updated perl-CGI-Emulate-PSGI packages fix security vulnerability
2017-05-26 09:54:58
Updated apache packages fix security vulnerability
2016-07-27 00:16:28
oraclelinux
oraclelinux
httpd security and bug fix update
2016-07-18 00:00:00
httpd security update
2016-07-18 00:00:00
ibm
ibm
prion
prion
Design/Logic Flaw
2016-07-19 02:00:00
Design/Logic Flaw
2016-10-06 14:59:00
Design/Logic Flaw
2016-09-25 10:59:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2016-07-18 16:26:29
httpd, mod_ssl security update
2016-07-18 15:57:06
redhatcve
redhatcve
CVE-2016-5387
2016-07-18 14:19:04
CVE-2016-1000104
2016-07-18 14:49:14
httpd
httpd
Apache Httpd < 2.4.25 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
Apache Httpd < 2.2.32 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
cve
cve
CVE-2016-5387
2016-07-19 02:00:19
amazon
amazon
Important: httpd24, httpd
2016-07-20 18:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerability
2016-07-18 00:00:00
alpinelinux
alpinelinux
CVE-2016-5387
2016-07-19 02:00:19
cvelist
cvelist
CVE-2016-4694
2016-09-25 10:00:00
cloudfoundry
cloudfoundry
Multiple CVEs: httpoxy | Cloud Foundry
2016-12-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
slackware
slackware
[slackware-security] httpd
2016-12-24 01:35:08
freebsd
freebsd
Apache httpd -- several vulnerabilities
2016-12-20 00:00:00
checkpoint_advisories
checkpoint_advisories
cert
cert
threatpost
threatpost
CGI Script Vulnerability 'Httpoxy' Allows Man-in-the-Middle Attack
2016-07-18 18:00:46
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-01-15 00:00:00
impervablog
impervablog
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
2020-05-27 09:22:21
apple
apple
About the security content of macOS High Sierra 10.13
2017-09-25 00:00:00
About the security content of macOS High Sierra 10.13 - Apple Support
2020-02-06 07:51:09
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00