The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perlUpgrade perl-suidperl | Dec 1, 2016 | Dec 6, 2010 |
| Debian | — | Upgrade libcgi-pm-perlUpgrade libcgi-simple-perlUpgrade perl | Jul 30, 2024 | Dec 6, 2010 |
| Freebsd | — | Upgrade bugzilla | Dec 10, 2025 | Jan 25, 2011 |
| Gentoo Linux | — | Upgrade www-apps/bugzilla. | Oct 30, 2017 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade perl-IO-Compress-BaseUpgrade perl-ExtUtils-MakeMakerUpgrade perl-coreUpgrade perl-Pod-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Archive-TarUpgrade perl-Parse-CPAN-MetaUpgrade perl-Archive-ExtractUpgrade perl-Digest-SHAUpgrade perl-Pod-EscapesUpgrade perl-Log-Message-SimpleUpgrade perl-Params-CheckUpgrade perl-Log-MessageUpgrade perl-Term-UIUpgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-File-FetchUpgrade perl-Compress-ZlibUpgrade perlUpgrade perl-Module-LoadedUpgrade perl-Compress-Raw-ZlibUpgrade perl-CPANPLUSUpgrade perl-Test-SimpleUpgrade perl-suidperlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-PluggableUpgrade perl-Package-ConstantsUpgrade perl-Module-BuildUpgrade perl-IO-ZlibUpgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-versionUpgrade perl-CGIUpgrade perl-Module-LoadUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-ZlibUpgrade perl-Module-Load-ConditionalUpgrade perl-Time-HiResUpgrade perl-parentUpgrade perl-Object-AccessorUpgrade perl-devel | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade perl-32bitUpgrade perl-Test-SimpleUpgrade perlUpgrade perl-Module-BuildUpgrade perl-x86Upgrade perl-baseUpgrade perl-docUpgrade perl-base-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub