CVE-2011-2766
libfcgi-perl - authentication bypass
EPSS 7.2%
描述
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
如何修補 CVE-2011-2766
要修補 CVE-2011-2766,請將受影響套件升級到下列已修補版本。
- Debian/libfcgi-perl—升級至 0.73-2 或更新版本
- Debian/libfcgi-perl—升級至 0.71-1+squeeze1 或更新版本
CVE-2011-2766 正在被利用嗎?
中等 — EPSS 為 7.2%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 0.73-2
- from 0, < 0.71-1+squeeze1