CVE-2010-4410 Other in n/a
Remote attackers can inject arbitrary HTTP headers and conduct response splitting attacks via the header function in Perl CGI libraries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-4410?
CVE-2010-4410 is a medium-severity vulnerability in n/a, published on 6 Dec 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
Weakness: CWE-94
Which versions are affected by CVE-2010-4410?
It affects 2 products.
Products include Andy Armstrong Cgi-Simple, Andy Armstrong Cgi.pm.
How do I fix CVE-2010-4410?
Upgrade to a fixed version.
Is CVE-2010-4410 being exploited?
There is no known exploitation of CVE-2010-4410 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2010-4410, GHSA-63qf-cwcv-ff3r.