Lucene search
Ubuntu.comUB:CVE-2010-4572HistoryJan 28, 2011 - 12:00 a.m.
CVE-2010-4572
2011-01-2800:00:00
ubuntu.com
ubuntu.com
10
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.4%
CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x
before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote
attackers to inject arbitrary HTTP headers and conduct HTTP response
splitting attacks via the query string, a different vulnerability than
CVE-2010-2761 and CVE-2010-4411.
Notes
| Author | Note |
|---|---|
| sbeattie | debian’s references to CVE-2010-4572 included libcgi-pm-perl, libcgi-simple-perl, and perl, but CVE-2010-4410 is the relevant one for those. |
Related
openvas
openvas
Fedora Update for perl-CGI-Simple FEDORA-2011-0631
2011-01-31 00:00:00
Fedora Update for perl-CGI-Simple FEDORA-2011-0653
2011-01-31 00:00:00
Fedora Update for perl-CGI-Simple FEDORA-2011-0631
2011-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: perl-CGI-Simple-1.113-1.fc13
2011-01-30 19:48:24
[SECURITY] Fedora 14 Update: perl-CGI-Simple-1.113-1.fc14
2011-01-30 19:52:02
[SECURITY] Fedora 14 Update: perl-CGI-3.51-1.fc14
2011-01-31 19:57:48
prion
prion
Crlf injection
2011-01-28 16:00:00
Design/Logic Flaw
2010-12-06 20:13:00
Crlf injection
2010-12-06 20:13:00
cve
cve
nessus
nessus
SuSE 10 Security Update : Perl (ZYPP Patch Number 7316)
2011-01-21 00:00:00
RHEL 6 : perl (RHSA-2011:0558)
2011-05-20 00:00:00
openSUSE Security Update : perl (openSUSE-SU-2011:0064-1)
2011-05-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package perl-CGI version 3.49-alt2
2011-01-19 00:00:00
debiancve
debiancve
ubuntucve
ubuntucve
f5
f5
oraclelinux
oraclelinux
perl security update
2011-12-08 00:00:00
perl security and bug fix update
2011-05-28 00:00:00
redhat
redhat
(RHSA-2011:0558) Moderate: perl security and bug fix update
2011-05-19 00:00:00
(RHSA-2011:1797) Moderate: perl security update
2011-12-08 00:00:00
centos
centos
perl security update
2011-12-09 08:14:32
securityvulns
securityvulns
[USN-1129-1] Perl vulnerabilities
2011-05-05 00:00:00
perl multiple security vulnerabilities
2011-05-20 00:00:00
[ MDVSA-2010:250 ] perl-CGI-Simple
2010-12-12 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2011-05-03 00:00:00
freebsd
freebsd
bugzilla -- multiple serious vulnerabilities
2011-01-24 00:00:00
veracode
veracode
Carriage Return Line Feed (CRLF)
2020-04-10 00:59:29
HTTP Response Splitting
2020-04-10 00:59:28
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2011-10-10 00:00:00
debian
debian
[SECURITY] [DSA 2322-1] bugzilla security update
2011-10-10 16:12:14
osv
osv
bugzilla - several
2011-10-10 00:00:00
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.01 Low
EPSS
Percentile
83.4%
Related for UB:CVE-2010-4572