NVD

Id
9496  
Name
CVE-2011-2766  
Description
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-09-23  
Modified Date
2012-11-05  
Seq
2011-2766  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54293 9496 CVE-2011-2766 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479  View
54294 9496 CVE-2011-2766 DSA-2327  View
54295 9496 CVE-2011-2766 MDVSA-2012:001  View
54296 9496 CVE-2011-2766 [oss-security] 20110908 CVE Request -- libfcgi-perl / perl-FCGI: Certain environment variables shared between first and subsequent HTTP requests  View
54297 9496 CVE-2011-2766 [oss-security] 20110908 Re: CVE Request -- libfcgi-perl / perl-FCGI: Certain environment variables shared between first and subsequent HTTP requests  View
54298 9496 CVE-2011-2766 49549  View
54299 9496 CVE-2011-2766 perlfast-cgi-security-bypass(69709)  View
54300 9496 CVE-2011-2766 https://bugzilla.redhat.com/show_bug.cgi?id=736604  View
54301 9496 CVE-2011-2766 openSUSE-SU-2012:0004  View
54302 9496 CVE-2011-2766 openSUSE-SU-2012:0036  View
54303 9496 CVE-2011-2766 https://rt.cpan.org/Public/Bug/Display.html?id=68380  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32015 JVNDB-2011-002255 CGI::Fast にて使用される FCGI における認証を回避される脆弱性 CGI::Fast にて使用される FCGI は、後のリクエストを処理している間、もう一つのリクエストから環境変数の値を使用するため、認証を回避される脆弱性が存在します。 CVE-2011-2766 50673 CVE-2011-2766 9496 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002255.html 2011-09-23 2011-09-28 View