The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perlUpgrade perl-suidperl | Dec 1, 2016 | Dec 6, 2010 |
| Debian | — | Upgrade libcgi-pm-perlUpgrade perlUpgrade libcgi-simple-perl | Jul 30, 2024 | Dec 6, 2010 |
| Freebsd | — | Upgrade bugzilla | Dec 10, 2025 | Jan 25, 2011 |
| Gentoo Linux | — | Upgrade www-apps/bugzilla. | Oct 30, 2017 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade perl-Compress-ZlibUpgrade perl-Digest-SHAUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-EscapesUpgrade perl-coreUpgrade perl-CPANPLUSUpgrade perl-Term-UIUpgrade perl-Params-CheckUpgrade perl-CPANUpgrade perl-Time-PieceUpgrade perl-Module-LoadedUpgrade perl-Compress-Raw-ZlibUpgrade perl-File-FetchUpgrade perl-Log-MessageUpgrade perlUpgrade perl-Archive-TarUpgrade perl-Archive-ExtractUpgrade perl-Pod-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perl-IO-Compress-BaseUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Parse-CPAN-MetaUpgrade perl-IPC-CmdUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-IO-Compress-ZlibUpgrade perl-develUpgrade perl-parentUpgrade perl-Module-LoadUpgrade perl-Locale-Maketext-SimpleUpgrade perl-suidperlUpgrade perl-Test-HarnessUpgrade perl-versionUpgrade perl-Module-BuildUpgrade perl-Module-PluggableUpgrade perl-ExtUtils-ParseXSUpgrade perl-libsUpgrade perl-Test-SimpleUpgrade perl-Time-HiResUpgrade perl-Module-Load-ConditionalUpgrade perl-CGIUpgrade perl-Package-ConstantsUpgrade perl-IO-Zlib | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade perl-base-32bitUpgrade perl-docUpgrade perl-baseUpgrade perl-Module-BuildUpgrade perl-32bitUpgrade perl-x86Upgrade perl-Test-SimpleUpgrade perl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub