NVD

Id
14204  
Name
CVE-2010-2761  
Description
The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-06  
Modified Date
2016-12-07  
Seq
2010-2761  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78487 14204 CVE-2010-2761 http://cpansearch.perl.org/src/LDS/CGI.pm-3.50/Changes  View
78488 14204 CVE-2010-2761 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
78489 14204 CVE-2010-2761 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
78490 14204 CVE-2010-2761 FEDORA-2011-0741  View
78491 14204 CVE-2010-2761 FEDORA-2011-0755  View
78492 14204 CVE-2010-2761 FEDORA-2011-0631  View
78493 14204 CVE-2010-2761 FEDORA-2011-0653  View
78494 14204 CVE-2010-2761 SUSE-SR:2011:001  View
78495 14204 CVE-2010-2761 SUSE-SR:2011:002  View
78496 14204 CVE-2010-2761 SUSE-SR:2011:005  View
78497 14204 CVE-2010-2761 [oss-security] 20101201 CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)  View
78498 14204 CVE-2010-2761 [oss-security] 20101201 Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)  View
78499 14204 CVE-2010-2761 [oss-security] 20101201 Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)  View
78500 14204 CVE-2010-2761 http://perl5.git.perl.org/perl.git/blobdiff/a0b94c2432b1d8c20653453a0f6970cb10f59aec..84601d63a7e34958da47dad1e61e27cb3bd467d1:/cpan/CGI/lib/CGI.pm  View
78501 14204 CVE-2010-2761 http://perl5.git.perl.org/perl.git/commit/84601d63a7e34958da47dad1e61e27cb3bd467d1  View
78502 14204 CVE-2010-2761 http://www.bugzilla.org/security/3.2.9/  View
78503 14204 CVE-2010-2761 MDVSA-2010:237  View
78504 14204 CVE-2010-2761 MDVSA-2010:250  View
78505 14204 CVE-2010-2761 http://www.nntp.perl.org/group/perl.perl5.changes/2010/11/msg28043.html  View
78506 14204 CVE-2010-2761 RHSA-2011:1797  View
78507 14204 CVE-2010-2761 ADV-2011-0076  View
78508 14204 CVE-2010-2761 ADV-2011-0207  View
78509 14204 CVE-2010-2761 ADV-2011-0212  View
78510 14204 CVE-2010-2761 ADV-2011-0249  View
78511 14204 CVE-2010-2761 ADV-2011-0271  View
78512 14204 CVE-2010-2761 https://bugzilla.mozilla.org/show_bug.cgi?id=591165  View
78513 14204 CVE-2010-2761 https://bugzilla.mozilla.org/show_bug.cgi?id=600464  View
78514 14204 CVE-2010-2761 https://github.com/AndyA/CGI--Simple/commit/e4942b871a26c1317a175a91ebb7262eea59b380  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36974 JVNDB-2010-002754 CGI.pm および CGI::Simple の multipart_init 関数における任意の HTTP ヘッダを挿入される脆弱性 CGI.pm および CGI::Simple の Simple.pm 内にある multipart_init 関数は、multipart/x-mixed-replace コンテンツの MIME 境界文字列のハードコード化された値を使用しているため、任意の HTTP ヘッダを挿入され、HTTP レスポンス分割攻撃を誘発される脆弱性が存在します。 CVE-2010-2761 45341 CVE-2010-2761 14204 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002754.html 2010-12-06 2012-12-17 View