The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated. NOTE: it could be argued that this is a design limitation of the Net::HTTPS API, and separate implementations should be independently assigned CVE identifiers for not working around this limitation. However, because this API was modified within LWP, a single CVE identifier has been assigned.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 124
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gisle_aas:libwww-perl:0.01:*:*:*:*:*:*:* | 0.01 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.02:*:*:*:*:*:*:* | 0.02 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.03:*:*:*:*:*:*:* | 0.03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.04:*:*:*:*:*:*:* | 0.04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.00:*:*:*:*:*:*:* | 5.00 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.01:*:*:*:*:*:*:* | 5.01 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.02:*:*:*:*:*:*:* | 5.02 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.03:*:*:*:*:*:*:* | 5.03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.04:*:*:*:*:*:*:* | 5.04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.05:*:*:*:*:*:*:* | 5.05 | Vulnerable | Gisle Aas |
- cpe:2.3:a:gisle_aas:libwww-perl:0.01:*:*:*:*:*:*:* Versions 0.01 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.02:*:*:*:*:*:*:* Versions 0.02 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.03:*:*:*:*:*:*:* Versions 0.03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.04:*:*:*:*:*:*:* Versions 0.04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.00:*:*:*:*:*:*:* Versions 5.00 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.01:*:*:*:*:*:*:* Versions 5.01 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.02:*:*:*:*:*:*:* Versions 5.02 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.03:*:*:*:*:*:*:* Versions 5.03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.04:*:*:*:*:*:*:* Versions 5.04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.05:*:*:*:*:*:*:* Versions 5.05 Vulnerable ·Gisle Aas
Show 114 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gisle_aas:libwww-perl:5.06:*:*:*:*:*:*:* | 5.06 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.07:*:*:*:*:*:*:* | 5.07 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.08:*:*:*:*:*:*:* | 5.08 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.09:*:*:*:*:*:*:* | 5.09 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.10:*:*:*:*:*:*:* | 5.10 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.11:*:*:*:*:*:*:* | 5.11 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.12:*:*:*:*:*:*:* | 5.12 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.13:*:*:*:*:*:*:* | 5.13 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.14:*:*:*:*:*:*:* | 5.14 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.15:*:*:*:*:*:*:* | 5.15 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.16:*:*:*:*:*:*:* | 5.16 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.17:*:*:*:*:*:*:* | 5.17 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18:*:*:*:*:*:*:* | 5.18 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_03:*:*:*:*:*:*:* | 5.18_03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_04:*:*:*:*:*:*:* | 5.18_04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_05:*:*:*:*:*:*:* | 5.18_05 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.19:*:*:*:*:*:*:* | 5.19 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.20:*:*:*:*:*:*:* | 5.20 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.21:*:*:*:*:*:*:* | 5.21 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.22:*:*:*:*:*:*:* | 5.22 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.30:*:*:*:*:*:*:* | 5.30 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.31:*:*:*:*:*:*:* | 5.31 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.32:*:*:*:*:*:*:* | 5.32 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.33:*:*:*:*:*:*:* | 5.33 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.34:*:*:*:*:*:*:* | 5.34 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.35:*:*:*:*:*:*:* | 5.35 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.36:*:*:*:*:*:*:* | 5.36 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.41:*:*:*:*:*:*:* | 5.41 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.42:*:*:*:*:*:*:* | 5.42 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.43:*:*:*:*:*:*:* | 5.43 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.44:*:*:*:*:*:*:* | 5.44 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.45:*:*:*:*:*:*:* | 5.45 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.46:*:*:*:*:*:*:* | 5.46 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.47:*:*:*:*:*:*:* | 5.47 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.48:*:*:*:*:*:*:* | 5.48 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.49:*:*:*:*:*:*:* | 5.49 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.50:*:*:*:*:*:*:* | 5.50 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.51:*:*:*:*:*:*:* | 5.51 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.52:*:*:*:*:*:*:* | 5.52 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53:*:*:*:*:*:*:* | 5.53 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_90:*:*:*:*:*:*:* | 5.53_90 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_91:*:*:*:*:*:*:* | 5.53_91 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_92:*:*:*:*:*:*:* | 5.53_92 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_93:*:*:*:*:*:*:* | 5.53_93 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_94:*:*:*:*:*:*:* | 5.53_94 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_95:*:*:*:*:*:*:* | 5.53_95 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_96:*:*:*:*:*:*:* | 5.53_96 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_97:*:*:*:*:*:*:* | 5.53_97 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.60:*:*:*:*:*:*:* | 5.60 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.61:*:*:*:*:*:*:* | 5.61 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.62:*:*:*:*:*:*:* | 5.62 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.63:*:*:*:*:*:*:* | 5.63 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.64:*:*:*:*:*:*:* | 5.64 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.65:*:*:*:*:*:*:* | 5.65 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.66:*:*:*:*:*:*:* | 5.66 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.67:*:*:*:*:*:*:* | 5.67 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.68:*:*:*:*:*:*:* | 5.68 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.69:*:*:*:*:*:*:* | 5.69 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.70:*:*:*:*:*:*:* | 5.70 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.71:*:*:*:*:*:*:* | 5.71 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.72:*:*:*:*:*:*:* | 5.72 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.73:*:*:*:*:*:*:* | 5.73 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.74:*:*:*:*:*:*:* | 5.74 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.75:*:*:*:*:*:*:* | 5.75 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.76:*:*:*:*:*:*:* | 5.76 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.77:*:*:*:*:*:*:* | 5.77 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.78:*:*:*:*:*:*:* | 5.78 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.79:*:*:*:*:*:*:* | 5.79 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.800:*:*:*:*:*:*:* | 5.800 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.801:*:*:*:*:*:*:* | 5.801 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.802:*:*:*:*:*:*:* | 5.802 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.803:*:*:*:*:*:*:* | 5.803 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.804:*:*:*:*:*:*:* | 5.804 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.805:*:*:*:*:*:*:* | 5.805 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.806:*:*:*:*:*:*:* | 5.806 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.807:*:*:*:*:*:*:* | 5.807 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.808:*:*:*:*:*:*:* | 5.808 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.810:*:*:*:*:*:*:* | 5.810 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.811:*:*:*:*:*:*:* | 5.811 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.812:*:*:*:*:*:*:* | 5.812 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.813:*:*:*:*:*:*:* | 5.813 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.814:*:*:*:*:*:*:* | 5.814 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.815:*:*:*:*:*:*:* | 5.815 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.816:*:*:*:*:*:*:* | 5.816 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.817:*:*:*:*:*:*:* | 5.817 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.818:*:*:*:*:*:*:* | 5.818 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.819:*:*:*:*:*:*:* | 5.819 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.820:*:*:*:*:*:*:* | 5.820 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.821:*:*:*:*:*:*:* | 5.821 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.822:*:*:*:*:*:*:* | 5.822 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.823:*:*:*:*:*:*:* | 5.823 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.824:*:*:*:*:*:*:* | 5.824 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.825:*:*:*:*:*:*:* | 5.825 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.826:*:*:*:*:*:*:* | 5.826 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.827:*:*:*:*:*:*:* | 5.827 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.828:*:*:*:*:*:*:* | 5.828 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.829:*:*:*:*:*:*:* | 5.829 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.830:*:*:*:*:*:*:* | 5.830 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.831:*:*:*:*:*:*:* | 5.831 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.832:*:*:*:*:*:*:* | 5.832 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.833:*:*:*:*:*:*:* | 5.833 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.834:*:*:*:*:*:*:* | 5.834 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.836:*:*:*:*:*:*:* | 5.836 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b5:*:*:*:*:*:*:* | 5b5 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b6:*:*:*:*:*:*:* | 5b6 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b7:*:*:*:*:*:*:* | 5b7 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b8:*:*:*:*:*:*:* | 5b8 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b9:*:*:*:*:*:*:* | 5b9 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b10:*:*:*:*:*:*:* | 5b10 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b11:*:*:*:*:*:*:* | 5b11 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b12:*:*:*:*:*:*:* | 5b12 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b13:*:*:*:*:*:*:* | 5b13 | Vulnerable | Gisle Aas |
| cpe:2.3:a:search.cpan:libwww-perl:*:*:*:*:*:*:*:* | up to 5.837 | Vulnerable | Search.cpan |
| cpe:2.3:a:search.cpan:libwww-perl:5.40_01:*:*:*:*:*:*:* | 5.40_01 | Vulnerable | Search.cpan |
- cpe:2.3:a:gisle_aas:libwww-perl:5.06:*:*:*:*:*:*:* Versions 5.06 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.07:*:*:*:*:*:*:* Versions 5.07 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.08:*:*:*:*:*:*:* Versions 5.08 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.09:*:*:*:*:*:*:* Versions 5.09 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.13:*:*:*:*:*:*:* Versions 5.13 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.14:*:*:*:*:*:*:* Versions 5.14 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.15:*:*:*:*:*:*:* Versions 5.15 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.16:*:*:*:*:*:*:* Versions 5.16 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.17:*:*:*:*:*:*:* Versions 5.17 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18:*:*:*:*:*:*:* Versions 5.18 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_03:*:*:*:*:*:*:* Versions 5.18_03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_04:*:*:*:*:*:*:* Versions 5.18_04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_05:*:*:*:*:*:*:* Versions 5.18_05 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.19:*:*:*:*:*:*:* Versions 5.19 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.20:*:*:*:*:*:*:* Versions 5.20 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.21:*:*:*:*:*:*:* Versions 5.21 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.22:*:*:*:*:*:*:* Versions 5.22 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.30:*:*:*:*:*:*:* Versions 5.30 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.31:*:*:*:*:*:*:* Versions 5.31 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.32:*:*:*:*:*:*:* Versions 5.32 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.33:*:*:*:*:*:*:* Versions 5.33 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.34:*:*:*:*:*:*:* Versions 5.34 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.35:*:*:*:*:*:*:* Versions 5.35 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.36:*:*:*:*:*:*:* Versions 5.36 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.41:*:*:*:*:*:*:* Versions 5.41 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.42:*:*:*:*:*:*:* Versions 5.42 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.43:*:*:*:*:*:*:* Versions 5.43 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.44:*:*:*:*:*:*:* Versions 5.44 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.45:*:*:*:*:*:*:* Versions 5.45 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.46:*:*:*:*:*:*:* Versions 5.46 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.47:*:*:*:*:*:*:* Versions 5.47 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.48:*:*:*:*:*:*:* Versions 5.48 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.49:*:*:*:*:*:*:* Versions 5.49 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.50:*:*:*:*:*:*:* Versions 5.50 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.51:*:*:*:*:*:*:* Versions 5.51 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.52:*:*:*:*:*:*:* Versions 5.52 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53:*:*:*:*:*:*:* Versions 5.53 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_90:*:*:*:*:*:*:* Versions 5.53_90 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_91:*:*:*:*:*:*:* Versions 5.53_91 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_92:*:*:*:*:*:*:* Versions 5.53_92 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_93:*:*:*:*:*:*:* Versions 5.53_93 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_94:*:*:*:*:*:*:* Versions 5.53_94 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_95:*:*:*:*:*:*:* Versions 5.53_95 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_96:*:*:*:*:*:*:* Versions 5.53_96 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_97:*:*:*:*:*:*:* Versions 5.53_97 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.60:*:*:*:*:*:*:* Versions 5.60 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.61:*:*:*:*:*:*:* Versions 5.61 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.62:*:*:*:*:*:*:* Versions 5.62 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.63:*:*:*:*:*:*:* Versions 5.63 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.64:*:*:*:*:*:*:* Versions 5.64 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.65:*:*:*:*:*:*:* Versions 5.65 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.66:*:*:*:*:*:*:* Versions 5.66 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.67:*:*:*:*:*:*:* Versions 5.67 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.68:*:*:*:*:*:*:* Versions 5.68 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.69:*:*:*:*:*:*:* Versions 5.69 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.70:*:*:*:*:*:*:* Versions 5.70 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.71:*:*:*:*:*:*:* Versions 5.71 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.72:*:*:*:*:*:*:* Versions 5.72 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.73:*:*:*:*:*:*:* Versions 5.73 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.74:*:*:*:*:*:*:* Versions 5.74 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.75:*:*:*:*:*:*:* Versions 5.75 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.76:*:*:*:*:*:*:* Versions 5.76 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.77:*:*:*:*:*:*:* Versions 5.77 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.78:*:*:*:*:*:*:* Versions 5.78 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.79:*:*:*:*:*:*:* Versions 5.79 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.800:*:*:*:*:*:*:* Versions 5.800 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.801:*:*:*:*:*:*:* Versions 5.801 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.802:*:*:*:*:*:*:* Versions 5.802 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.803:*:*:*:*:*:*:* Versions 5.803 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.804:*:*:*:*:*:*:* Versions 5.804 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.805:*:*:*:*:*:*:* Versions 5.805 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.806:*:*:*:*:*:*:* Versions 5.806 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.807:*:*:*:*:*:*:* Versions 5.807 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.808:*:*:*:*:*:*:* Versions 5.808 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.810:*:*:*:*:*:*:* Versions 5.810 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.811:*:*:*:*:*:*:* Versions 5.811 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.812:*:*:*:*:*:*:* Versions 5.812 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.813:*:*:*:*:*:*:* Versions 5.813 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.814:*:*:*:*:*:*:* Versions 5.814 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.815:*:*:*:*:*:*:* Versions 5.815 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.816:*:*:*:*:*:*:* Versions 5.816 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.817:*:*:*:*:*:*:* Versions 5.817 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.818:*:*:*:*:*:*:* Versions 5.818 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.819:*:*:*:*:*:*:* Versions 5.819 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.820:*:*:*:*:*:*:* Versions 5.820 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.821:*:*:*:*:*:*:* Versions 5.821 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.822:*:*:*:*:*:*:* Versions 5.822 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.823:*:*:*:*:*:*:* Versions 5.823 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.824:*:*:*:*:*:*:* Versions 5.824 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.825:*:*:*:*:*:*:* Versions 5.825 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.826:*:*:*:*:*:*:* Versions 5.826 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.827:*:*:*:*:*:*:* Versions 5.827 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.828:*:*:*:*:*:*:* Versions 5.828 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.829:*:*:*:*:*:*:* Versions 5.829 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.830:*:*:*:*:*:*:* Versions 5.830 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.831:*:*:*:*:*:*:* Versions 5.831 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.832:*:*:*:*:*:*:* Versions 5.832 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.833:*:*:*:*:*:*:* Versions 5.833 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.834:*:*:*:*:*:*:* Versions 5.834 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.836:*:*:*:*:*:*:* Versions 5.836 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b5:*:*:*:*:*:*:* Versions 5b5 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b6:*:*:*:*:*:*:* Versions 5b6 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b7:*:*:*:*:*:*:* Versions 5b7 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b8:*:*:*:*:*:*:* Versions 5b8 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b9:*:*:*:*:*:*:* Versions 5b9 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b10:*:*:*:*:*:*:* Versions 5b10 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b11:*:*:*:*:*:*:* Versions 5b11 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b12:*:*:*:*:*:*:* Versions 5b12 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b13:*:*:*:*:*:*:* Versions 5b13 Vulnerable ·Gisle Aas
- cpe:2.3:a:search.cpan:libwww-perl:*:*:*:*:*:*:*:* Versions up to 5.837 Vulnerable ·Search.cpan
- cpe:2.3:a:search.cpan:libwww-perl:5.40_01:*:*:*:*:*:*:* Versions 5.40_01 Vulnerable ·Search.cpan
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
Timeline
- 2026-10-02 Threatist record created from CVE-2011-0633
- 2026-10-03 Alias added: GHSA-3fhh-g5rg-6jpm
References
Sources
- CVE-2011-0633 · CVE Program
- CVE-2011-0633 · NVD
- FIRST EPSS
- GHSA-3fhh-g5rg-6jpm · GitHub Advisory Database · CC BY 4.0
- CVE-2011-0633 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences