1. CVE-Search
  2. CVE-2012-5526
ID CVE-2012-5526
Summary CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
References
Vulnerable Configurations
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.42:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.42:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.43:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.43:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.44:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.44:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.45:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.45:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.50:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.50:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.51:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.51:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.52:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.52:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.53:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.53:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.54:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.54:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.55:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.55:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.56:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.56:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:1.57:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:1.57:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.01:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.01:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.13:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.13:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.14:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.14:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.15:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.15:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.16:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.16:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.17:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.17:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.18:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.18:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.19:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.19:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.20:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.20:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.21:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.21:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.22:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.22:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.23:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.23:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.24:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.24:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.25:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.25:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.26:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.26:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.27:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.27:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.28:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.28:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.29:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.29:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.30:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.30:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.31:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.31:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.32:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.32:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.33:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.33:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.34:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.34:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.35:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.35:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.36:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.36:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.37:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.37:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.38:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.38:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.39:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.39:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.40:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.40:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.41:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.41:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.42:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.42:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.43:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.43:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.44:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.44:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.45:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.45:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.46:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.46:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.47:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.47:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.48:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.48:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.49:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.49:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.50:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.50:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.51:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.51:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.52:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.52:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.53:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.53:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.54:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.54:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.55:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.55:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.56:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.56:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.57:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.57:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.58:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.58:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.59:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.59:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.60:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.60:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.61:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.61:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.62:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.62:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.63:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.63:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.64:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.64:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.65:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.65:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.66:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.66:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.67:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.67:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.68:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.68:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.69:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.69:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.70:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.70:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.71:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.71:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.72:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.72:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.73:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.73:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.74:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.74:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.75:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.75:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.76:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.76:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.77:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.77:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.78:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.78:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.79:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.79:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.80:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.80:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.81:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.81:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.82:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.82:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.83:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.83:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.84:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.84:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.85:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.85:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.86:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.86:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.87:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.87:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.88:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.88:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.89:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.89:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.90:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.90:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.91:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.91:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.92:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.92:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.93:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.93:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.94:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.94:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.95:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.95:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.96:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.96:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.97:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.97:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.98:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.98:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.99:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.99:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.751:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.751:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:2.752:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:2.752:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.00:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.00:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.01:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.01:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.02:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.02:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.03:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.03:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.04:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.04:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.05:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.05:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.06:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.06:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.07:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.07:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.08:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.08:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.09:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.09:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.10:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.11:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.12:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.12:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.13:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.13:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.14:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.14:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.15:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.15:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.16:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.16:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.17:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.17:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.18:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.18:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.19:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.19:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.20:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.20:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.21:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.21:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.22:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.22:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.23:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.23:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.24:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.24:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.25:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.25:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.26:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.26:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.27:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.27:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.28:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.28:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.29:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.29:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.30:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.30:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.31:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.31:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.32:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.32:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.33:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.33:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.34:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.34:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.35:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.35:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.36:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.36:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.37:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.37:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.38:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.38:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.39:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.39:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.40:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.40:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.41:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.41:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.42:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.42:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.43:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.43:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.44:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.44:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.45:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.45:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.46:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.46:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.47:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.47:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.48:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.48:*:*:*:*:*:*:*
  • cpe:2.3:a:andy_armstrong:cgi.pm:3.49:*:*:*:*:*:*:*
    cpe:2.3:a:andy_armstrong:cgi.pm:3.49:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 29-08-2017 - 01:32)
Impact:
Exploitability:
CWE CWE-16
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
redhat via4
advisories
rhsa
id RHSA-2013:0685
rpms
  • perl-4:5.10.1-130.el6_4
  • perl-4:5.8.8-40.el5_9
  • perl-Archive-Extract-1:0.38-130.el6_4
  • perl-Archive-Tar-0:1.58-130.el6_4
  • perl-CGI-0:3.51-130.el6_4
  • perl-CPAN-0:1.9402-130.el6_4
  • perl-CPANPLUS-0:0.88-130.el6_4
  • perl-Compress-Raw-Bzip2-0:2.020-130.el6_4
  • perl-Compress-Raw-Zlib-1:2.020-130.el6_4
  • perl-Compress-Zlib-0:2.020-130.el6_4
  • perl-Digest-SHA-1:5.47-130.el6_4
  • perl-ExtUtils-CBuilder-1:0.27-130.el6_4
  • perl-ExtUtils-Embed-0:1.28-130.el6_4
  • perl-ExtUtils-MakeMaker-0:6.55-130.el6_4
  • perl-ExtUtils-ParseXS-1:2.2003.0-130.el6_4
  • perl-File-Fetch-0:0.26-130.el6_4
  • perl-IO-Compress-Base-0:2.020-130.el6_4
  • perl-IO-Compress-Bzip2-0:2.020-130.el6_4
  • perl-IO-Compress-Zlib-0:2.020-130.el6_4
  • perl-IO-Zlib-1:1.09-130.el6_4
  • perl-IPC-Cmd-1:0.56-130.el6_4
  • perl-Locale-Maketext-Simple-1:0.18-130.el6_4
  • perl-Log-Message-1:0.02-130.el6_4
  • perl-Log-Message-Simple-0:0.04-130.el6_4
  • perl-Module-Build-1:0.3500-130.el6_4
  • perl-Module-CoreList-0:2.18-130.el6_4
  • perl-Module-Load-1:0.16-130.el6_4
  • perl-Module-Load-Conditional-0:0.30-130.el6_4
  • perl-Module-Loaded-1:0.02-130.el6_4
  • perl-Module-Pluggable-1:3.90-130.el6_4
  • perl-Object-Accessor-1:0.34-130.el6_4
  • perl-Package-Constants-1:0.02-130.el6_4
  • perl-Params-Check-1:0.26-130.el6_4
  • perl-Parse-CPAN-Meta-1:1.40-130.el6_4
  • perl-Pod-Escapes-1:1.04-130.el6_4
  • perl-Pod-Simple-1:3.13-130.el6_4
  • perl-Term-UI-0:0.20-130.el6_4
  • perl-Test-Harness-0:3.17-130.el6_4
  • perl-Test-Simple-0:0.92-130.el6_4
  • perl-Time-HiRes-4:1.9721-130.el6_4
  • perl-Time-Piece-0:1.15-130.el6_4
  • perl-core-0:5.10.1-130.el6_4
  • perl-debuginfo-4:5.10.1-130.el6_4
  • perl-debuginfo-4:5.8.8-40.el5_9
  • perl-devel-4:5.10.1-130.el6_4
  • perl-libs-4:5.10.1-130.el6_4
  • perl-parent-1:0.221-130.el6_4
  • perl-suidperl-4:5.10.1-130.el6_4
  • perl-suidperl-4:5.8.8-40.el5_9
  • perl-version-3:0.77-130.el6_4
refmap via4
bid 56562
confirm
debian DSA-2586
misc https://github.com/markstos/CGI.pm/pull/23
mlist [oss-security] 20121115 Re: CVE Request -- perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers
sectrack 1027780
secunia
  • 51457
  • 55314
ubuntu USN-1643-1
xf perl-cgipm-header-injection(80098)
Last major update 29-08-2017 - 01:32
Published 21-11-2012 - 23:55
Last modified 29-08-2017 - 01:32
Back to Top