QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-2761

Back to search

CVE-2010-2761

Published: Dec 6, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2011:1797
vendor-advisory
x_refsource_REDHAT
SUSE-SR:2011:001
vendor-advisory
x_refsource_SUSE
FEDORA-2011-0653
vendor-advisory
x_refsource_FEDORA
43068
third-party-advisory
x_refsource_SECUNIA
69588
vdb-entry
x_refsource_OSVDB
43165
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0212
vdb-entry
x_refsource_VUPEN
FEDORA-2011-0741
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2011:005
vendor-advisory
x_refsource_SUSE
ADV-2011-0271
vdb-entry
x_refsource_VUPEN
43033
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0207
vdb-entry
x_refsource_VUPEN
42877
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2011:002
vendor-advisory
x_refsource_SUSE
ADV-2011-0249
vdb-entry
x_refsource_VUPEN
FEDORA-2011-0755
vendor-advisory
x_refsource_FEDORA
MDVSA-2010:250
vendor-advisory
x_refsource_MANDRIVA
MDVSA-2010:237
vendor-advisory
x_refsource_MANDRIVA
69589
vdb-entry
x_refsource_OSVDB
ADV-2011-0076
vdb-entry
x_refsource_VUPEN
FEDORA-2011-0631
vendor-advisory
x_refsource_FEDORA
43147
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now