Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5526
HistoryNov 21, 2012 - 12:00 a.m.

CVE-2012-5526

2012-11-2100:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.2%

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1)
Set-Cookie or (2) P3P headers, which might allow remote attackers to inject
arbitrary headers into responses from applications that use CGI.pm.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchperl< 5.8.8-12ubuntu0.7UNKNOWN
ubuntu10.04noarchperl< 5.10.1-8ubuntu2.2UNKNOWN
ubuntu11.10noarchperl< 5.12.4-4ubuntu0.1UNKNOWN
ubuntu12.04noarchperl< 5.14.2-6ubuntu2.2UNKNOWN
ubuntu12.10noarchperl< 5.14.2-13ubuntu0.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.2%