CVE-2016-1000110

원문 설명

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

영향받는 소프트웨어

• Python ≥ 3.3.0 < 3.3.7≥ 3.5.0 < 3.5.3≥ 3.4.0 < 3.4.6≥ 2.7.0 < 2.7.13 수정 버전: 3.3.7, 3.5.3, 3.4.6, 2.7.13 정확 일치

상세

공개일

2019-11-28

최종 수정

2024-08-06

CVSS 벡터

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

참고 자료

• cve.org/CVE-2016-1000110
• nvd.nist.gov/vuln/detail/CVE-2016-1000110
• security-tracker.debian.org/tracker/CVE-2016-1000110
• bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000110
• bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000110
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7...
• lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html