CVE-2016-6286

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...

CVE-2016-6286

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...

CVE-2016-6286

The CVE-2016-6286 issue affects the CHICKEN spiffy-cgi-handlers egg, where a nonexistent Proxy header is mapped to the HTTP_PROXY environment variable. This allows CGI programs that use HTTP_PROXY to be directed to an attacker-controlled proxy (an httpoxy-style flaw). It applies to all versions p...