Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cgi.pm | Andy_armstrong | * | 3.50 (including) |
| Cgi.pm | Andy_armstrong | 1.4 (including) | 1.4 (including) |
| Cgi.pm | Andy_armstrong | 1.42 (including) | 1.42 (including) |
| Cgi.pm | Andy_armstrong | 1.43 (including) | 1.43 (including) |
| Cgi.pm | Andy_armstrong | 1.44 (including) | 1.44 (including) |
| Cgi.pm | Andy_armstrong | 1.45 (including) | 1.45 (including) |
| Cgi.pm | Andy_armstrong | 1.50 (including) | 1.50 (including) |
| Cgi.pm | Andy_armstrong | 1.51 (including) | 1.51 (including) |
| Cgi.pm | Andy_armstrong | 1.52 (including) | 1.52 (including) |
| Cgi.pm | Andy_armstrong | 1.53 (including) | 1.53 (including) |
| Cgi.pm | Andy_armstrong | 1.54 (including) | 1.54 (including) |
| Cgi.pm | Andy_armstrong | 1.55 (including) | 1.55 (including) |
| Cgi.pm | Andy_armstrong | 1.56 (including) | 1.56 (including) |
| Cgi.pm | Andy_armstrong | 1.57 (including) | 1.57 (including) |
| Cgi.pm | Andy_armstrong | 2.0 (including) | 2.0 (including) |
| Cgi.pm | Andy_armstrong | 2.01 (including) | 2.01 (including) |
| Cgi.pm | Andy_armstrong | 2.13 (including) | 2.13 (including) |
| Cgi.pm | Andy_armstrong | 2.14 (including) | 2.14 (including) |
| Cgi.pm | Andy_armstrong | 2.15 (including) | 2.15 (including) |
| Cgi.pm | Andy_armstrong | 2.16 (including) | 2.16 (including) |
| Cgi.pm | Andy_armstrong | 2.17 (including) | 2.17 (including) |
| Cgi.pm | Andy_armstrong | 2.18 (including) | 2.18 (including) |
| Cgi.pm | Andy_armstrong | 2.19 (including) | 2.19 (including) |
| Cgi.pm | Andy_armstrong | 2.20 (including) | 2.20 (including) |
| Cgi.pm | Andy_armstrong | 2.21 (including) | 2.21 (including) |
| Cgi.pm | Andy_armstrong | 2.22 (including) | 2.22 (including) |
| Cgi.pm | Andy_armstrong | 2.23 (including) | 2.23 (including) |
| Cgi.pm | Andy_armstrong | 2.24 (including) | 2.24 (including) |
| Cgi.pm | Andy_armstrong | 2.25 (including) | 2.25 (including) |
| Cgi.pm | Andy_armstrong | 2.26 (including) | 2.26 (including) |
| Cgi.pm | Andy_armstrong | 2.27 (including) | 2.27 (including) |
| Cgi.pm | Andy_armstrong | 2.28 (including) | 2.28 (including) |
| Cgi.pm | Andy_armstrong | 2.29 (including) | 2.29 (including) |
| Cgi.pm | Andy_armstrong | 2.30 (including) | 2.30 (including) |
| Cgi.pm | Andy_armstrong | 2.31 (including) | 2.31 (including) |
| Cgi.pm | Andy_armstrong | 2.32 (including) | 2.32 (including) |
| Cgi.pm | Andy_armstrong | 2.33 (including) | 2.33 (including) |
| Cgi.pm | Andy_armstrong | 2.34 (including) | 2.34 (including) |
| Cgi.pm | Andy_armstrong | 2.35 (including) | 2.35 (including) |
| Cgi.pm | Andy_armstrong | 2.36 (including) | 2.36 (including) |
| Cgi.pm | Andy_armstrong | 2.37 (including) | 2.37 (including) |
| Cgi.pm | Andy_armstrong | 2.38 (including) | 2.38 (including) |
| Cgi.pm | Andy_armstrong | 2.39 (including) | 2.39 (including) |
| Cgi.pm | Andy_armstrong | 2.40 (including) | 2.40 (including) |
| Cgi.pm | Andy_armstrong | 2.41 (including) | 2.41 (including) |
| Cgi.pm | Andy_armstrong | 2.42 (including) | 2.42 (including) |
| Cgi.pm | Andy_armstrong | 2.43 (including) | 2.43 (including) |
| Cgi.pm | Andy_armstrong | 2.44 (including) | 2.44 (including) |
| Cgi.pm | Andy_armstrong | 2.45 (including) | 2.45 (including) |
| Cgi.pm | Andy_armstrong | 2.46 (including) | 2.46 (including) |
| Cgi.pm | Andy_armstrong | 2.47 (including) | 2.47 (including) |
| Cgi.pm | Andy_armstrong | 2.48 (including) | 2.48 (including) |
| Cgi.pm | Andy_armstrong | 2.49 (including) | 2.49 (including) |
| Cgi.pm | Andy_armstrong | 2.50 (including) | 2.50 (including) |
| Cgi.pm | Andy_armstrong | 2.51 (including) | 2.51 (including) |
| Cgi.pm | Andy_armstrong | 2.52 (including) | 2.52 (including) |
| Cgi.pm | Andy_armstrong | 2.53 (including) | 2.53 (including) |
| Cgi.pm | Andy_armstrong | 2.54 (including) | 2.54 (including) |
| Cgi.pm | Andy_armstrong | 2.55 (including) | 2.55 (including) |
| Cgi.pm | Andy_armstrong | 2.56 (including) | 2.56 (including) |
| Cgi.pm | Andy_armstrong | 2.57 (including) | 2.57 (including) |
| Cgi.pm | Andy_armstrong | 2.58 (including) | 2.58 (including) |
| Cgi.pm | Andy_armstrong | 2.59 (including) | 2.59 (including) |
| Cgi.pm | Andy_armstrong | 2.60 (including) | 2.60 (including) |
| Cgi.pm | Andy_armstrong | 2.61 (including) | 2.61 (including) |
| Cgi.pm | Andy_armstrong | 2.62 (including) | 2.62 (including) |
| Cgi.pm | Andy_armstrong | 2.63 (including) | 2.63 (including) |
| Cgi.pm | Andy_armstrong | 2.64 (including) | 2.64 (including) |
| Cgi.pm | Andy_armstrong | 2.65 (including) | 2.65 (including) |
| Cgi.pm | Andy_armstrong | 2.66 (including) | 2.66 (including) |
| Cgi.pm | Andy_armstrong | 2.67 (including) | 2.67 (including) |
| Cgi.pm | Andy_armstrong | 2.68 (including) | 2.68 (including) |
| Cgi.pm | Andy_armstrong | 2.69 (including) | 2.69 (including) |
| Cgi.pm | Andy_armstrong | 2.70 (including) | 2.70 (including) |
| Cgi.pm | Andy_armstrong | 2.71 (including) | 2.71 (including) |
| Cgi.pm | Andy_armstrong | 2.72 (including) | 2.72 (including) |
| Cgi.pm | Andy_armstrong | 2.73 (including) | 2.73 (including) |
| Cgi.pm | Andy_armstrong | 2.74 (including) | 2.74 (including) |
| Cgi.pm | Andy_armstrong | 2.75 (including) | 2.75 (including) |
| Cgi.pm | Andy_armstrong | 2.76 (including) | 2.76 (including) |
| Cgi.pm | Andy_armstrong | 2.77 (including) | 2.77 (including) |
| Cgi.pm | Andy_armstrong | 2.78 (including) | 2.78 (including) |
| Cgi.pm | Andy_armstrong | 2.79 (including) | 2.79 (including) |
| Cgi.pm | Andy_armstrong | 2.80 (including) | 2.80 (including) |
| Cgi.pm | Andy_armstrong | 2.81 (including) | 2.81 (including) |
| Cgi.pm | Andy_armstrong | 2.82 (including) | 2.82 (including) |
| Cgi.pm | Andy_armstrong | 2.83 (including) | 2.83 (including) |
| Cgi.pm | Andy_armstrong | 2.84 (including) | 2.84 (including) |
| Cgi.pm | Andy_armstrong | 2.85 (including) | 2.85 (including) |
| Cgi.pm | Andy_armstrong | 2.86 (including) | 2.86 (including) |
| Cgi.pm | Andy_armstrong | 2.87 (including) | 2.87 (including) |
| Cgi.pm | Andy_armstrong | 2.88 (including) | 2.88 (including) |
| Cgi.pm | Andy_armstrong | 2.89 (including) | 2.89 (including) |
| Cgi.pm | Andy_armstrong | 2.90 (including) | 2.90 (including) |
| Cgi.pm | Andy_armstrong | 2.91 (including) | 2.91 (including) |
| Cgi.pm | Andy_armstrong | 2.92 (including) | 2.92 (including) |
| Cgi.pm | Andy_armstrong | 2.93 (including) | 2.93 (including) |
| Cgi.pm | Andy_armstrong | 2.94 (including) | 2.94 (including) |
| Cgi.pm | Andy_armstrong | 2.95 (including) | 2.95 (including) |
| Cgi.pm | Andy_armstrong | 2.96 (including) | 2.96 (including) |
| Cgi.pm | Andy_armstrong | 2.97 (including) | 2.97 (including) |
| Cgi.pm | Andy_armstrong | 2.98 (including) | 2.98 (including) |
| Cgi.pm | Andy_armstrong | 2.99 (including) | 2.99 (including) |
| Cgi.pm | Andy_armstrong | 2.751 (including) | 2.751 (including) |
| Cgi.pm | Andy_armstrong | 2.752 (including) | 2.752 (including) |
| Cgi.pm | Andy_armstrong | 3.00 (including) | 3.00 (including) |
| Cgi.pm | Andy_armstrong | 3.01 (including) | 3.01 (including) |
| Cgi.pm | Andy_armstrong | 3.02 (including) | 3.02 (including) |
| Cgi.pm | Andy_armstrong | 3.03 (including) | 3.03 (including) |
| Cgi.pm | Andy_armstrong | 3.04 (including) | 3.04 (including) |
| Cgi.pm | Andy_armstrong | 3.05 (including) | 3.05 (including) |
| Cgi.pm | Andy_armstrong | 3.06 (including) | 3.06 (including) |
| Cgi.pm | Andy_armstrong | 3.07 (including) | 3.07 (including) |
| Cgi.pm | Andy_armstrong | 3.08 (including) | 3.08 (including) |
| Cgi.pm | Andy_armstrong | 3.09 (including) | 3.09 (including) |
| Cgi.pm | Andy_armstrong | 3.10 (including) | 3.10 (including) |
| Cgi.pm | Andy_armstrong | 3.11 (including) | 3.11 (including) |
| Cgi.pm | Andy_armstrong | 3.12 (including) | 3.12 (including) |
| Cgi.pm | Andy_armstrong | 3.13 (including) | 3.13 (including) |
| Cgi.pm | Andy_armstrong | 3.14 (including) | 3.14 (including) |
| Cgi.pm | Andy_armstrong | 3.15 (including) | 3.15 (including) |
| Cgi.pm | Andy_armstrong | 3.16 (including) | 3.16 (including) |
| Cgi.pm | Andy_armstrong | 3.17 (including) | 3.17 (including) |
| Cgi.pm | Andy_armstrong | 3.18 (including) | 3.18 (including) |
| Cgi.pm | Andy_armstrong | 3.19 (including) | 3.19 (including) |
| Cgi.pm | Andy_armstrong | 3.20 (including) | 3.20 (including) |
| Cgi.pm | Andy_armstrong | 3.21 (including) | 3.21 (including) |
| Cgi.pm | Andy_armstrong | 3.22 (including) | 3.22 (including) |
| Cgi.pm | Andy_armstrong | 3.23 (including) | 3.23 (including) |
| Cgi.pm | Andy_armstrong | 3.24 (including) | 3.24 (including) |
| Cgi.pm | Andy_armstrong | 3.25 (including) | 3.25 (including) |
| Cgi.pm | Andy_armstrong | 3.26 (including) | 3.26 (including) |
| Cgi.pm | Andy_armstrong | 3.27 (including) | 3.27 (including) |
| Cgi.pm | Andy_armstrong | 3.28 (including) | 3.28 (including) |
| Cgi.pm | Andy_armstrong | 3.29 (including) | 3.29 (including) |
| Cgi.pm | Andy_armstrong | 3.30 (including) | 3.30 (including) |
| Cgi.pm | Andy_armstrong | 3.31 (including) | 3.31 (including) |
| Cgi.pm | Andy_armstrong | 3.32 (including) | 3.32 (including) |
| Cgi.pm | Andy_armstrong | 3.33 (including) | 3.33 (including) |
| Cgi.pm | Andy_armstrong | 3.34 (including) | 3.34 (including) |
| Cgi.pm | Andy_armstrong | 3.35 (including) | 3.35 (including) |
| Cgi.pm | Andy_armstrong | 3.36 (including) | 3.36 (including) |
| Cgi.pm | Andy_armstrong | 3.37 (including) | 3.37 (including) |
| Cgi.pm | Andy_armstrong | 3.38 (including) | 3.38 (including) |
| Cgi.pm | Andy_armstrong | 3.39 (including) | 3.39 (including) |
| Cgi.pm | Andy_armstrong | 3.40 (including) | 3.40 (including) |
| Cgi.pm | Andy_armstrong | 3.41 (including) | 3.41 (including) |
| Cgi.pm | Andy_armstrong | 3.42 (including) | 3.42 (including) |
| Cgi.pm | Andy_armstrong | 3.43 (including) | 3.43 (including) |
| Cgi.pm | Andy_armstrong | 3.44 (including) | 3.44 (including) |
| Cgi.pm | Andy_armstrong | 3.45 (including) | 3.45 (including) |
| Cgi.pm | Andy_armstrong | 3.46 (including) | 3.46 (including) |
| Cgi.pm | Andy_armstrong | 3.47 (including) | 3.47 (including) |
| Cgi.pm | Andy_armstrong | 3.48 (including) | 3.48 (including) |
| Cgi.pm | Andy_armstrong | 3.49 (including) | 3.49 (including) |
| Libcgi-pm-perl | Ubuntu | karmic | * |
| Libcgi-pm-perl | Ubuntu | lucid | * |
| Libcgi-pm-perl | Ubuntu | maverick | * |
| Libcgi-pm-perl | Ubuntu | upstream | * |
| Libcgi-simple-perl | Ubuntu | dapper | * |
| Libcgi-simple-perl | Ubuntu | hardy | * |
| Libcgi-simple-perl | Ubuntu | karmic | * |
| Libcgi-simple-perl | Ubuntu | lucid | * |
| Libcgi-simple-perl | Ubuntu | maverick | * |
| Libcgi-simple-perl | Ubuntu | upstream | * |
| Perl | Ubuntu | dapper | * |
| Perl | Ubuntu | hardy | * |
| Perl | Ubuntu | karmic | * |
| Perl | Ubuntu | lucid | * |
| Perl | Ubuntu | maverick | * |
| Perl | Ubuntu | upstream | * |