Lucene search
Ubuntu.comUB:CVE-2016-1000104HistoryDec 03, 2019 - 12:00 a.m.
CVE-2016-1000104
2019-12-0300:00:00
ubuntu.com
ubuntu.com
12
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.2 Low
EPSS
Percentile
96.4%
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in
mod_fcgid through 2016-07-07.
Notes
| Author | Note |
|---|---|
| iconstantin | Apache provided that the fix for this issue against httpd (CVE-2016-5387) also mitigates all risks for CGI’s which are invoked by mod_fcgid. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libapache2-mod-fcgid | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | libapache2-mod-fcgid | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | libapache2-mod-fcgid | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | libapache2-mod-fcgid | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | libapache2-mod-fcgid | < any | UNKNOWN |
Related
nessus
nessus
openSUSE Security Update : apache2-mod_fcgid (openSUSE-2016-1005) (httpoxy)
2016-08-22 00:00:00
RHEL 7 : mod_fcgid (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : mod_fcgid (Unpatched Vulnerability)
2024-06-03 00:00:00
redhatcve
redhatcve
CVE-2016-1000104
2016-07-18 14:49:14
CVE-2016-5387
2016-07-18 14:19:04
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0203)
2022-01-28 00:00:00
CentOS Update for httpd CESA-2016:1422 centos7
2016-07-19 00:00:00
Ubuntu: Security Advisory (USN-3038-1)
2016-08-02 00:00:00
mageia
mageia
Updated apache-mod_fcgid packages fix security vulnerability
2017-07-13 12:10:46
Updated apache packages fix security vulnerability
2016-07-27 00:16:28
Updated perl-CGI-Emulate-PSGI packages fix security vulnerability
2017-05-26 09:54:58
cve
cve
CVE-2016-1000104
2019-12-03 22:15:13
CVE-2016-5387
2016-07-19 02:00:19
CVE-2016-1000102
2016-10-06 14:59:17
prion
prion
Security feature bypass
2019-12-03 22:15:00
Design/Logic Flaw
2016-07-19 02:00:00
Design/Logic Flaw
2016-09-25 10:59:00
cvelist
cvelist
nvd
nvd
cbl_mariner
cbl_mariner
CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21
2024-06-25 21:08:29
ibm
ibm
redhat
redhat
(RHSA-2016:1421) Important: httpd security update
2016-07-18 00:00:00
(RHSA-2016:1422) Important: httpd security and bug fix update
2016-07-18 14:13:23
centos
centos
httpd, mod_ssl security update
2016-07-18 15:57:06
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2016-07-18 16:26:29
ubuntu
ubuntu
Apache HTTP Server vulnerability
2016-07-18 00:00:00
amazon
amazon
Important: httpd24, httpd
2016-07-20 18:00:00
httpd
httpd
Apache Httpd < 2.2.32 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
Apache Httpd < 2.4.25 : HTTP_PROXY environment variable "httpoxy" mitigation
2016-07-02 00:00:00
alpinelinux
alpinelinux
CVE-2016-5387
2016-07-19 02:00:19
oraclelinux
oraclelinux
httpd security and bug fix update
2016-07-18 00:00:00
httpd security update
2016-07-18 00:00:00
debian
debian
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
[SECURITY] [DSA 3623-1] apache2 security update
2016-07-20 08:39:47
[SECURITY] [DLA 553-1] apache2 security update
2016-07-20 11:30:29
fedora
fedora
[SECURITY] Fedora 23 Update: perl-CGI-Emulate-PSGI-0.22-1.fc23
2016-08-09 00:02:40
[SECURITY] Fedora 24 Update: perl-CGI-Emulate-PSGI-0.22-1.fc24
2016-08-08 20:37:39
[SECURITY] Fedora 23 Update: httpd-2.4.23-4.fc23
2016-07-27 20:56:05
f5
f5
SOL80513384 - Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 00:00:00
Apache HTTPD vulnerability CVE-2016-5387
2016-08-02 21:36:00
ubuntucve
ubuntucve
CVE-2016-5387
2016-07-18 00:00:00
CVE-2016-4694
2016-09-25 00:00:00
veracode
veracode
Open Redirection
2019-01-15 09:12:18
osv
osv
CVE-2016-5387
2016-07-19 02:00:00
wordpress - security update
2016-07-29 00:00:00
debiancve
debiancve
CVE-2016-5387
2016-07-19 02:00:19
cloudfoundry
cloudfoundry
Multiple CVEs: httpoxy | Cloud Foundry
2016-12-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
Security fix for the ALT Linux 8 package apache2 version 1:2.4.25-alt1
2017-05-18 00:00:00
freebsd
freebsd
Apache httpd -- several vulnerabilities
2016-12-20 00:00:00
slackware
slackware
[slackware-security] httpd
2016-12-24 01:35:08
cert
cert
checkpoint_advisories
checkpoint_advisories
gentoo
gentoo
Apache: Multiple vulnerabilities
2017-01-15 00:00:00
threatpost
threatpost
CGI Script Vulnerability 'Httpoxy' Allows Man-in-the-Middle Attack
2016-07-18 18:00:46
impervablog
impervablog
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
2020-05-27 09:22:21
apple
apple
About the security content of macOS High Sierra 10.13
2017-09-25 00:00:00
About the security content of macOS High Sierra 10.13 - Apple Support
2020-02-06 07:51:09
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.2 Low
EPSS
Percentile
96.4%
Related for UB:CVE-2016-1000104