CVE-2016-6287

The CVE-2016-6287 entry concerns the CHICKEN http-client egg. The vulnerability arises because the http-client used the HTTP_PROXY environment variable to decide whether to route HTTP traffic via a proxy, even in CGI contexts. This allowed a user-supplied Proxy header under several web servers to...

CVE-2016-6286

The CVE-2016-6286 issue affects the CHICKEN spiffy-cgi-handlers egg, where a nonexistent Proxy header is mapped to the HTTP_PROXY environment variable. This allows CGI programs that use HTTP_PROXY to be directed to an attacker-controlled proxy (an httpoxy-style flaw). It applies to all versions p...