CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2766

The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.3%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2011-2766

Fast Cgi Project » Fast Cgi » Version: 0.70

cpe:2.3:a:fast_cgi_project:fast_cgi:0.70
Fast Cgi Project » Fast Cgi » Version: 0.71

cpe:2.3:a:fast_cgi_project:fast_cgi:0.71
Fast Cgi Project » Fast Cgi » Version: 0.71_01

cpe:2.3:a:fast_cgi_project:fast_cgi:0.71_01
Fast Cgi Project » Fast Cgi » Version: 0.71_02

cpe:2.3:a:fast_cgi_project:fast_cgi:0.71_02
Fast Cgi Project » Fast Cgi » Version: 0.71_03

cpe:2.3:a:fast_cgi_project:fast_cgi:0.71_03
Fast Cgi Project » Fast Cgi » Version: 0.72

cpe:2.3:a:fast_cgi_project:fast_cgi:0.72
Fast Cgi Project » Fast Cgi » Version: 0.73

cpe:2.3:a:fast_cgi_project:fast_cgi:0.73
Debian » Debian Linux » Version: 5.0

cpe:2.3:o:debian:debian_linux:5.0
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2766

Products

Pricing

Contact Us