CVE-2011-2766

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479Exploit, Issue Tracking, Mailing List, Third Party Advisory
http://www.debian.org/security/2011/dsa-2327Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:001Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/09/08/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/09/08/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/49549Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=736604Exploit, Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/69709Third Party Advisory, VDB Entry
https://hermes.opensuse.org/messages/13154637Broken Link
https://hermes.opensuse.org/messages/13155253Broken Link
https://rt.cpan.org/Public/Bug/Display.html?id=68380Exploit, Patch, Third Party Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607479Exploit, Issue Tracking, Mailing List, Third Party Advisory
http://www.debian.org/security/2011/dsa-2327Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:001Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/09/08/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/09/08/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/49549Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=736604Exploit, Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/69709Third Party Advisory, VDB Entry
https://hermes.opensuse.org/messages/13154637Broken Link
https://hermes.opensuse.org/messages/13155253Broken Link
https://rt.cpan.org/Public/Bug/Display.html?id=68380Exploit, Patch, Third Party Advisory

Timeline

Published: Sep 23, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-27679.8mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary CVE-2011-27685.8Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows CVE-2011-27694.3Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR conn CVE-2011-27704.3Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject ar CVE-2011-27714.3Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via CVE-2011-27725.0The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows re CVE-2011-27736.8Cross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrator CVE-2011-27744.0The "Reply to message" feature in Mahara 1.3.x and 1.4.x before 1.4.1 allows remote authenticated users to read the messages of a different CVE-2011-27764.4Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via vectors related to sy CVE-2011-27774.4samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain p CVE-2011-27787.6Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possi CVE-2011-27793.6Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, wh