Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2011-2766
PUBLISHED
More InfoOfficial Page
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At-23 Sep, 2011 | 10:00
Updated At-06 Aug, 2024 | 23:15
Rejected At-
▼CVE Numbering Authority (CNA)

The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.openwall.com/lists/oss-security/2011/09/08/2
mailing-list
x_refsource_MLIST
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2011/09/08/1
mailing-list
x_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilities/69709
vdb-entry
x_refsource_XF
https://bugzilla.redhat.com/show_bug.cgi?id=736604
x_refsource_CONFIRM
https://hermes.opensuse.org/messages/13155253
vendor-advisory
x_refsource_SUSE
https://rt.cpan.org/Public/Bug/Display.html?id=68380
x_refsource_CONFIRM
http://www.securityfocus.com/bid/49549
vdb-entry
x_refsource_BID
https://hermes.opensuse.org/messages/13154637
vendor-advisory
x_refsource_SUSE
http://www.debian.org/security/2011/dsa-2327
vendor-advisory
x_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2012:001
vendor-advisory
x_refsource_MANDRIVA
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.openwall.com/lists/oss-security/2011/09/08/2
mailing-list
x_refsource_MLIST
x_transferred
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479
x_refsource_CONFIRM
x_transferred
http://www.openwall.com/lists/oss-security/2011/09/08/1
mailing-list
x_refsource_MLIST
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/69709
vdb-entry
x_refsource_XF
x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=736604
x_refsource_CONFIRM
x_transferred
https://hermes.opensuse.org/messages/13155253
vendor-advisory
x_refsource_SUSE
x_transferred
https://rt.cpan.org/Public/Bug/Display.html?id=68380
x_refsource_CONFIRM
x_transferred
http://www.securityfocus.com/bid/49549
vdb-entry
x_refsource_BID
x_transferred
https://hermes.opensuse.org/messages/13154637
vendor-advisory
x_refsource_SUSE
x_transferred
http://www.debian.org/security/2011/dsa-2327
vendor-advisory
x_refsource_DEBIAN
x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2012:001
vendor-advisory
x_refsource_MANDRIVA
x_transferred
Details not found