CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2)…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-94.
Summary
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 174
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:andy_armstrong:cgi.pm:*:*:*:*:*:*:*:* | up to 3.49 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.4:*:*:*:*:*:*:* | 1.4 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.42:*:*:*:*:*:*:* | 1.42 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.43:*:*:*:*:*:*:* | 1.43 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.44:*:*:*:*:*:*:* | 1.44 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.45:*:*:*:*:*:*:* | 1.45 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.50:*:*:*:*:*:*:* | 1.50 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.51:*:*:*:*:*:*:* | 1.51 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.52:*:*:*:*:*:*:* | 1.52 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.53:*:*:*:*:*:*:* | 1.53 | Vulnerable | Andy Armstrong |
- cpe:2.3:a:andy_armstrong:cgi.pm:*:*:*:*:*:*:*:* Versions up to 3.49 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.42:*:*:*:*:*:*:* Versions 1.42 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.43:*:*:*:*:*:*:* Versions 1.43 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.44:*:*:*:*:*:*:* Versions 1.44 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.45:*:*:*:*:*:*:* Versions 1.45 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.50:*:*:*:*:*:*:* Versions 1.50 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.51:*:*:*:*:*:*:* Versions 1.51 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.53:*:*:*:*:*:*:* Versions 1.53 Vulnerable ·Andy Armstrong
Show 164 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:andy_armstrong:cgi.pm:1.54:*:*:*:*:*:*:* | 1.54 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.55:*:*:*:*:*:*:* | 1.55 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.56:*:*:*:*:*:*:* | 1.56 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:1.57:*:*:*:*:*:*:* | 1.57 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.01:*:*:*:*:*:*:* | 2.01 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.13:*:*:*:*:*:*:* | 2.13 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.14:*:*:*:*:*:*:* | 2.14 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.15:*:*:*:*:*:*:* | 2.15 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.16:*:*:*:*:*:*:* | 2.16 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.17:*:*:*:*:*:*:* | 2.17 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.18:*:*:*:*:*:*:* | 2.18 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.19:*:*:*:*:*:*:* | 2.19 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.20:*:*:*:*:*:*:* | 2.20 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.21:*:*:*:*:*:*:* | 2.21 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.22:*:*:*:*:*:*:* | 2.22 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.23:*:*:*:*:*:*:* | 2.23 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.24:*:*:*:*:*:*:* | 2.24 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.25:*:*:*:*:*:*:* | 2.25 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.26:*:*:*:*:*:*:* | 2.26 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.27:*:*:*:*:*:*:* | 2.27 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.28:*:*:*:*:*:*:* | 2.28 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.29:*:*:*:*:*:*:* | 2.29 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.30:*:*:*:*:*:*:* | 2.30 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.31:*:*:*:*:*:*:* | 2.31 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.32:*:*:*:*:*:*:* | 2.32 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.33:*:*:*:*:*:*:* | 2.33 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.34:*:*:*:*:*:*:* | 2.34 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.35:*:*:*:*:*:*:* | 2.35 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.36:*:*:*:*:*:*:* | 2.36 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.37:*:*:*:*:*:*:* | 2.37 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.38:*:*:*:*:*:*:* | 2.38 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.39:*:*:*:*:*:*:* | 2.39 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.40:*:*:*:*:*:*:* | 2.40 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.41:*:*:*:*:*:*:* | 2.41 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.42:*:*:*:*:*:*:* | 2.42 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.43:*:*:*:*:*:*:* | 2.43 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.44:*:*:*:*:*:*:* | 2.44 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.45:*:*:*:*:*:*:* | 2.45 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.46:*:*:*:*:*:*:* | 2.46 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.47:*:*:*:*:*:*:* | 2.47 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.48:*:*:*:*:*:*:* | 2.48 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.49:*:*:*:*:*:*:* | 2.49 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.50:*:*:*:*:*:*:* | 2.50 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.51:*:*:*:*:*:*:* | 2.51 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.52:*:*:*:*:*:*:* | 2.52 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.53:*:*:*:*:*:*:* | 2.53 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.54:*:*:*:*:*:*:* | 2.54 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.55:*:*:*:*:*:*:* | 2.55 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.56:*:*:*:*:*:*:* | 2.56 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.57:*:*:*:*:*:*:* | 2.57 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.58:*:*:*:*:*:*:* | 2.58 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.59:*:*:*:*:*:*:* | 2.59 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.60:*:*:*:*:*:*:* | 2.60 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.61:*:*:*:*:*:*:* | 2.61 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.62:*:*:*:*:*:*:* | 2.62 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.63:*:*:*:*:*:*:* | 2.63 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.64:*:*:*:*:*:*:* | 2.64 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.65:*:*:*:*:*:*:* | 2.65 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.66:*:*:*:*:*:*:* | 2.66 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.67:*:*:*:*:*:*:* | 2.67 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.68:*:*:*:*:*:*:* | 2.68 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.69:*:*:*:*:*:*:* | 2.69 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.70:*:*:*:*:*:*:* | 2.70 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.71:*:*:*:*:*:*:* | 2.71 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.72:*:*:*:*:*:*:* | 2.72 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.73:*:*:*:*:*:*:* | 2.73 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.74:*:*:*:*:*:*:* | 2.74 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.75:*:*:*:*:*:*:* | 2.75 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.76:*:*:*:*:*:*:* | 2.76 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.77:*:*:*:*:*:*:* | 2.77 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.78:*:*:*:*:*:*:* | 2.78 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.79:*:*:*:*:*:*:* | 2.79 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.80:*:*:*:*:*:*:* | 2.80 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.81:*:*:*:*:*:*:* | 2.81 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.82:*:*:*:*:*:*:* | 2.82 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.83:*:*:*:*:*:*:* | 2.83 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.84:*:*:*:*:*:*:* | 2.84 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.85:*:*:*:*:*:*:* | 2.85 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.86:*:*:*:*:*:*:* | 2.86 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.87:*:*:*:*:*:*:* | 2.87 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.88:*:*:*:*:*:*:* | 2.88 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.89:*:*:*:*:*:*:* | 2.89 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.90:*:*:*:*:*:*:* | 2.90 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.91:*:*:*:*:*:*:* | 2.91 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.92:*:*:*:*:*:*:* | 2.92 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.93:*:*:*:*:*:*:* | 2.93 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.94:*:*:*:*:*:*:* | 2.94 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.95:*:*:*:*:*:*:* | 2.95 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.96:*:*:*:*:*:*:* | 2.96 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.97:*:*:*:*:*:*:* | 2.97 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.98:*:*:*:*:*:*:* | 2.98 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.99:*:*:*:*:*:*:* | 2.99 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.751:*:*:*:*:*:*:* | 2.751 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:2.752:*:*:*:*:*:*:* | 2.752 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.00:*:*:*:*:*:*:* | 3.00 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.01:*:*:*:*:*:*:* | 3.01 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.02:*:*:*:*:*:*:* | 3.02 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.03:*:*:*:*:*:*:* | 3.03 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.04:*:*:*:*:*:*:* | 3.04 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.05:*:*:*:*:*:*:* | 3.05 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.06:*:*:*:*:*:*:* | 3.06 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.07:*:*:*:*:*:*:* | 3.07 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.08:*:*:*:*:*:*:* | 3.08 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.09:*:*:*:*:*:*:* | 3.09 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.10:*:*:*:*:*:*:* | 3.10 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.11:*:*:*:*:*:*:* | 3.11 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.12:*:*:*:*:*:*:* | 3.12 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.13:*:*:*:*:*:*:* | 3.13 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.14:*:*:*:*:*:*:* | 3.14 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.15:*:*:*:*:*:*:* | 3.15 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.16:*:*:*:*:*:*:* | 3.16 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.17:*:*:*:*:*:*:* | 3.17 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.18:*:*:*:*:*:*:* | 3.18 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.19:*:*:*:*:*:*:* | 3.19 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.20:*:*:*:*:*:*:* | 3.20 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.21:*:*:*:*:*:*:* | 3.21 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.22:*:*:*:*:*:*:* | 3.22 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.23:*:*:*:*:*:*:* | 3.23 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.24:*:*:*:*:*:*:* | 3.24 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.25:*:*:*:*:*:*:* | 3.25 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.26:*:*:*:*:*:*:* | 3.26 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.27:*:*:*:*:*:*:* | 3.27 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.28:*:*:*:*:*:*:* | 3.28 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.29:*:*:*:*:*:*:* | 3.29 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.30:*:*:*:*:*:*:* | 3.30 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.31:*:*:*:*:*:*:* | 3.31 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.32:*:*:*:*:*:*:* | 3.32 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.33:*:*:*:*:*:*:* | 3.33 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.34:*:*:*:*:*:*:* | 3.34 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.35:*:*:*:*:*:*:* | 3.35 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.36:*:*:*:*:*:*:* | 3.36 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.37:*:*:*:*:*:*:* | 3.37 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.38:*:*:*:*:*:*:* | 3.38 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.39:*:*:*:*:*:*:* | 3.39 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.40:*:*:*:*:*:*:* | 3.40 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.41:*:*:*:*:*:*:* | 3.41 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.42:*:*:*:*:*:*:* | 3.42 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.43:*:*:*:*:*:*:* | 3.43 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.44:*:*:*:*:*:*:* | 3.44 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.45:*:*:*:*:*:*:* | 3.45 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.46:*:*:*:*:*:*:* | 3.46 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.47:*:*:*:*:*:*:* | 3.47 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi.pm:3.48:*:*:*:*:*:*:* | 3.48 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:*:*:*:*:*:*:*:* | up to 1.112 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.078:*:*:*:*:*:*:* | 0.078 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.079:*:*:*:*:*:*:* | 0.079 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.080:*:*:*:*:*:*:* | 0.080 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.081:*:*:*:*:*:*:* | 0.081 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.082:*:*:*:*:*:*:* | 0.082 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:0.83:*:*:*:*:*:*:* | 0.83 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.1.2:*:*:*:*:*:*:* | 1.1.2 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.103:*:*:*:*:*:*:* | 1.103 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.104:*:*:*:*:*:*:* | 1.104 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.105:*:*:*:*:*:*:* | 1.105 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.106:*:*:*:*:*:*:* | 1.106 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.107:*:*:*:*:*:*:* | 1.107 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.108:*:*:*:*:*:*:* | 1.108 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.109:*:*:*:*:*:*:* | 1.109 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.110:*:*:*:*:*:*:* | 1.110 | Vulnerable | Andy Armstrong |
| cpe:2.3:a:andy_armstrong:cgi-simple:1.111:*:*:*:*:*:*:* | 1.111 | Vulnerable | Andy Armstrong |
- cpe:2.3:a:andy_armstrong:cgi.pm:1.54:*:*:*:*:*:*:* Versions 1.54 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.55:*:*:*:*:*:*:* Versions 1.55 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.56:*:*:*:*:*:*:* Versions 1.56 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:1.57:*:*:*:*:*:*:* Versions 1.57 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.01:*:*:*:*:*:*:* Versions 2.01 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.13:*:*:*:*:*:*:* Versions 2.13 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.14:*:*:*:*:*:*:* Versions 2.14 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.15:*:*:*:*:*:*:* Versions 2.15 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.16:*:*:*:*:*:*:* Versions 2.16 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.17:*:*:*:*:*:*:* Versions 2.17 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.18:*:*:*:*:*:*:* Versions 2.18 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.19:*:*:*:*:*:*:* Versions 2.19 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.20:*:*:*:*:*:*:* Versions 2.20 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.21:*:*:*:*:*:*:* Versions 2.21 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.22:*:*:*:*:*:*:* Versions 2.22 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.23:*:*:*:*:*:*:* Versions 2.23 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.24:*:*:*:*:*:*:* Versions 2.24 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.25:*:*:*:*:*:*:* Versions 2.25 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.26:*:*:*:*:*:*:* Versions 2.26 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.27:*:*:*:*:*:*:* Versions 2.27 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.28:*:*:*:*:*:*:* Versions 2.28 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.29:*:*:*:*:*:*:* Versions 2.29 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.30:*:*:*:*:*:*:* Versions 2.30 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.31:*:*:*:*:*:*:* Versions 2.31 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.32:*:*:*:*:*:*:* Versions 2.32 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.33:*:*:*:*:*:*:* Versions 2.33 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.34:*:*:*:*:*:*:* Versions 2.34 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.35:*:*:*:*:*:*:* Versions 2.35 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.36:*:*:*:*:*:*:* Versions 2.36 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.37:*:*:*:*:*:*:* Versions 2.37 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.38:*:*:*:*:*:*:* Versions 2.38 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.39:*:*:*:*:*:*:* Versions 2.39 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.40:*:*:*:*:*:*:* Versions 2.40 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.41:*:*:*:*:*:*:* Versions 2.41 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.42:*:*:*:*:*:*:* Versions 2.42 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.43:*:*:*:*:*:*:* Versions 2.43 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.44:*:*:*:*:*:*:* Versions 2.44 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.45:*:*:*:*:*:*:* Versions 2.45 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.46:*:*:*:*:*:*:* Versions 2.46 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.47:*:*:*:*:*:*:* Versions 2.47 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.48:*:*:*:*:*:*:* Versions 2.48 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.49:*:*:*:*:*:*:* Versions 2.49 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.50:*:*:*:*:*:*:* Versions 2.50 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.51:*:*:*:*:*:*:* Versions 2.51 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.52:*:*:*:*:*:*:* Versions 2.52 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.53:*:*:*:*:*:*:* Versions 2.53 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.54:*:*:*:*:*:*:* Versions 2.54 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.55:*:*:*:*:*:*:* Versions 2.55 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.56:*:*:*:*:*:*:* Versions 2.56 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.57:*:*:*:*:*:*:* Versions 2.57 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.58:*:*:*:*:*:*:* Versions 2.58 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.59:*:*:*:*:*:*:* Versions 2.59 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.60:*:*:*:*:*:*:* Versions 2.60 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.61:*:*:*:*:*:*:* Versions 2.61 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.62:*:*:*:*:*:*:* Versions 2.62 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.63:*:*:*:*:*:*:* Versions 2.63 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.64:*:*:*:*:*:*:* Versions 2.64 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.65:*:*:*:*:*:*:* Versions 2.65 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.66:*:*:*:*:*:*:* Versions 2.66 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.67:*:*:*:*:*:*:* Versions 2.67 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.68:*:*:*:*:*:*:* Versions 2.68 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.69:*:*:*:*:*:*:* Versions 2.69 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.70:*:*:*:*:*:*:* Versions 2.70 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.71:*:*:*:*:*:*:* Versions 2.71 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.72:*:*:*:*:*:*:* Versions 2.72 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.73:*:*:*:*:*:*:* Versions 2.73 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.74:*:*:*:*:*:*:* Versions 2.74 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.75:*:*:*:*:*:*:* Versions 2.75 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.76:*:*:*:*:*:*:* Versions 2.76 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.77:*:*:*:*:*:*:* Versions 2.77 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.78:*:*:*:*:*:*:* Versions 2.78 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.79:*:*:*:*:*:*:* Versions 2.79 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.80:*:*:*:*:*:*:* Versions 2.80 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.81:*:*:*:*:*:*:* Versions 2.81 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.82:*:*:*:*:*:*:* Versions 2.82 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.83:*:*:*:*:*:*:* Versions 2.83 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.84:*:*:*:*:*:*:* Versions 2.84 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.85:*:*:*:*:*:*:* Versions 2.85 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.86:*:*:*:*:*:*:* Versions 2.86 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.87:*:*:*:*:*:*:* Versions 2.87 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.88:*:*:*:*:*:*:* Versions 2.88 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.89:*:*:*:*:*:*:* Versions 2.89 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.90:*:*:*:*:*:*:* Versions 2.90 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.91:*:*:*:*:*:*:* Versions 2.91 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.92:*:*:*:*:*:*:* Versions 2.92 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.93:*:*:*:*:*:*:* Versions 2.93 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.94:*:*:*:*:*:*:* Versions 2.94 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.95:*:*:*:*:*:*:* Versions 2.95 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.96:*:*:*:*:*:*:* Versions 2.96 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.97:*:*:*:*:*:*:* Versions 2.97 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.98:*:*:*:*:*:*:* Versions 2.98 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.99:*:*:*:*:*:*:* Versions 2.99 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.751:*:*:*:*:*:*:* Versions 2.751 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:2.752:*:*:*:*:*:*:* Versions 2.752 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.03:*:*:*:*:*:*:* Versions 3.03 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.04:*:*:*:*:*:*:* Versions 3.04 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.05:*:*:*:*:*:*:* Versions 3.05 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.06:*:*:*:*:*:*:* Versions 3.06 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.07:*:*:*:*:*:*:* Versions 3.07 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.08:*:*:*:*:*:*:* Versions 3.08 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.09:*:*:*:*:*:*:* Versions 3.09 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.13:*:*:*:*:*:*:* Versions 3.13 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.16:*:*:*:*:*:*:* Versions 3.16 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.18:*:*:*:*:*:*:* Versions 3.18 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.19:*:*:*:*:*:*:* Versions 3.19 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.20:*:*:*:*:*:*:* Versions 3.20 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.21:*:*:*:*:*:*:* Versions 3.21 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.22:*:*:*:*:*:*:* Versions 3.22 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.23:*:*:*:*:*:*:* Versions 3.23 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.24:*:*:*:*:*:*:* Versions 3.24 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.25:*:*:*:*:*:*:* Versions 3.25 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.26:*:*:*:*:*:*:* Versions 3.26 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.27:*:*:*:*:*:*:* Versions 3.27 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.28:*:*:*:*:*:*:* Versions 3.28 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.29:*:*:*:*:*:*:* Versions 3.29 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.30:*:*:*:*:*:*:* Versions 3.30 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.31:*:*:*:*:*:*:* Versions 3.31 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.32:*:*:*:*:*:*:* Versions 3.32 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.33:*:*:*:*:*:*:* Versions 3.33 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.34:*:*:*:*:*:*:* Versions 3.34 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.35:*:*:*:*:*:*:* Versions 3.35 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.36:*:*:*:*:*:*:* Versions 3.36 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.37:*:*:*:*:*:*:* Versions 3.37 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.38:*:*:*:*:*:*:* Versions 3.38 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.39:*:*:*:*:*:*:* Versions 3.39 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.40:*:*:*:*:*:*:* Versions 3.40 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.41:*:*:*:*:*:*:* Versions 3.41 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.42:*:*:*:*:*:*:* Versions 3.42 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.43:*:*:*:*:*:*:* Versions 3.43 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.44:*:*:*:*:*:*:* Versions 3.44 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.45:*:*:*:*:*:*:* Versions 3.45 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.46:*:*:*:*:*:*:* Versions 3.46 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.47:*:*:*:*:*:*:* Versions 3.47 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi.pm:3.48:*:*:*:*:*:*:* Versions 3.48 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:*:*:*:*:*:*:*:* Versions up to 1.112 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.078:*:*:*:*:*:*:* Versions 0.078 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.079:*:*:*:*:*:*:* Versions 0.079 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.080:*:*:*:*:*:*:* Versions 0.080 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.081:*:*:*:*:*:*:* Versions 0.081 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.082:*:*:*:*:*:*:* Versions 0.082 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:0.83:*:*:*:*:*:*:* Versions 0.83 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.103:*:*:*:*:*:*:* Versions 1.103 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.104:*:*:*:*:*:*:* Versions 1.104 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.105:*:*:*:*:*:*:* Versions 1.105 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.106:*:*:*:*:*:*:* Versions 1.106 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.107:*:*:*:*:*:*:* Versions 1.107 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.108:*:*:*:*:*:*:* Versions 1.108 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.109:*:*:*:*:*:*:* Versions 1.109 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.110:*:*:*:*:*:*:* Versions 1.110 Vulnerable ·Andy Armstrong
- cpe:2.3:a:andy_armstrong:cgi-simple:1.111:*:*:*:*:*:*:* Versions 1.111 Vulnerable ·Andy Armstrong
Remediation
Red Hat 2 advisories
- RHSA-2011:1797 Released 2011-12-08 · Red Hat rating Moderateperl security update
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-32.el5_7.6, perl-4:5.8.8-32.el5_7.6.i386, perl-4:5.8.8-32.el5_7.6.ia64 +5
- Red Hat Enterprise Linux AS version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-4:5.8.8-32.el5_7.6, perl-4:5.8.8-32.el5_7.6.i386, perl-suidperl-4:5.8.8-32.el5_7.6 +1
- Red Hat Enterprise Linux Desktop version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-suidperl-3:5.8.5-57.el4 +1
- Red Hat Enterprise Linux ES version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 perl-3:5.8.5-57.el4, perl-3:5.8.5-57.el4.i386, perl-3:5.8.5-57.el4.ia64 +3
- RHSA-2011:0558 Released 2011-05-19 · Red Hat rating Moderateperl security and bug fix update
- Red Hat Enterprise Linux Desktop (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
- Red Hat Enterprise Linux HPC Node (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
- Red Hat Enterprise Linux Server (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +43
- Red Hat Enterprise Linux Workstation (v. 6) perl-4:5.10.1-119.el6, perl-Archive-Extract-1:0.38-119.el6, perl-Archive-Tar-1.58-119.el6 +41
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2011:0558 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2011:0558 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2011:0558 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2011:1797 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2011:0558 |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-4410
- 2026-10-03 Alias added: GHSA-63qf-cwcv-ff3r
References
Patch 6
- http://perl5.git.perl.org/perl.git/blobdiff/a0b94c2432b1d8c20653453a0f6970cb10f59aec..84601d63a7e34958da47dad1e61e27cb3bd467d1:/cpan/CGI/lib/CGI.pm
- [oss-security] 20101201 Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)
- [oss-security] 20101201 Re: CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)
- http://perl5.git.perl.org/perl.git/commit/84601d63a7e34958da47dad1e61e27cb3bd467d1
- http://www.nntp.perl.org/group/perl.perl5.changes/2010/11/msg28043.html
- [oss-security] 20101201 CVE Request -- perl-CGI two ids, perl-CGI-Simple one id (CVE-2010-3172 already assigned for Bugzilla part)
Advisory 7
More Andy Armstrong Cgi-simple vulnerabilities
- TI-2010-02645 The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2010-4410 · CVE Program
- CVE-2010-4410 · NVD
- FIRST EPSS
- GHSA-63qf-cwcv-ff3r · GitHub Advisory Database · CC BY 4.0
- CVE-2010-4410 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences