Gentoo FoundationMGASA-2014-0098Updated perl-CGI-Application packages fix CVE-2013-7329
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
Percentile
76.9%
Updated perl-CGI-Application package fixes security vulnerability: When applications using CGI::Application overload setup(), which is normally the case, CGI::Application since version 4.19 has dump_html as a default run-mode unless the application explicitly redefines it. This unexpectedly dumps a complete set of web query data and server environment information as an error page, thus leaking information (CVE-2013-7329).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | perl-cgi-application | < 4.500.0-2.1 | perl-CGI-Application-4.500.0-2.1.mga3 |
| Mageia | 4 | noarch | perl-cgi-application | < 4.500.0-3.1 | perl-CGI-Application-4.500.0-3.1.mga4 |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
Percentile
76.9%