| Package | Affected versions | Patched versions |
|---|---|---|
| cgi-simple | = 0.078= 0.079= 0.080= 0.081= 0.082= 0.83= 1.0= 1.1= 1.1.1= 1.1.2= 1.103= 1.104= 1.105= 1.106= 1.107= 1.108= 1.109= 1.110= 1.111≤ 1.112 | |
| cgi.pm | = 1.4= 1.42= 1.43= 1.44= 1.45= 1.50= 1.51= 1.52= 1.53= 1.54= 1.55= 1.56= 1.57= 2.0= 2.01= 2.13= 2.14= 2.15= 2.16= 2.17= 2.18= 2.19= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 2.27= 2.28= 2.29= 2.30= 2.31= 2.32= 2.33= 2.34= 2.35= 2.36= 2.37= 2.38= 2.39= 2.40= 2.41= 2.42= 2.43= 2.44= 2.45= 2.46= 2.47= 2.48= 2.49= 2.50= 2.51= 2.52= 2.53= 2.54= 2.55= 2.56= 2.57= 2.58= 2.59= 2.60= 2.61= 2.62= 2.63= 2.64= 2.65= 2.66= 2.67= 2.68= 2.69= 2.70= 2.71= 2.72= 2.73= 2.74= 2.75= 2.751= 2.752= 2.76= 2.77= 2.78= 2.79= 2.80= 2.81= 2.82= 2.83= 2.84= 2.85= 2.86= 2.87= 2.88= 2.89= 2.90= 2.91= 2.92= 2.93 |
The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free= 2.94= 2.95= 2.96= 2.97= 2.98= 2.99= 3.00= 3.01= 3.02= 3.03= 3.04= 3.05= 3.06= 3.07= 3.08= 3.09= 3.10= 3.11= 3.12= 3.13= 3.14= 3.15= 3.16= 3.17= 3.18= 3.19= 3.20= 3.21= 3.22= 3.23= 3.24= 3.25= 3.26= 3.27= 3.28= 3.29= 3.30= 3.31= 3.32= 3.33= 3.34= 3.35= 3.36= 3.37= 3.38= 3.39= 3.40= 3.41= 3.42= 3.43= 3.44= 3.45= 3.46= 3.47= 3.48≤ 3.49