CVE-2012-5526
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P...
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
Exploit likelihood
What each source reports
NVD Score used
5.0
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
CVE-2012-5526- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
CVE-2012-5526- Updated
- 2026-11-02
EUVDEUVD-2012-5418 No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
EUVD-2012-5418- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9x3m-wmpr-vc58 No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P...
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
GHSA-9x3m-wmpr-vc58- Updated
- 2026-11-02
OSV No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
CVE-2012-5526- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5526 No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
DEBIAN-CVE-2012-5526- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-5526 No score
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- Record
UBUNTU-CVE-2012-5526- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcgi-pm-perlDebian:12 |
before 3.61-2 | 3.61-2 |
libcgi-pm-perlDebian:13 |
before 3.61-2 | 3.61-2 |
libcgi-pm-perlDebian:14 |
before 3.61-2 | 3.61-2 |
perlDebian:12 |
before 5.14.2-16 | 5.14.2-16 |
perlDebian:13 |
before 5.14.2-16 | 5.14.2-16 |
perlDebian:14 |
before 5.14.2-16 | 5.14.2-16 |
perlDebian:6.0 |
before 5.10.1-17squeeze4, plus listed versions 5.10.1-175.10.1-17squeeze15.10.1-17squeeze25.10.1-17squeeze3 |
5.10.1-17squeeze4 |
libcgi-pm-perlDebian:6.0 |
before 3.49-1squeeze2, plus listed versions 3.49-1squeeze1 |
3.49-1squeeze2 |
perlRed Hat:enterprise_linux:5::server |
before 4:5.8.8-40.el5_9 | 4:5.8.8-40.el5_9 |
perl-debuginfoRed Hat:enterprise_linux:5::server |
before 4:5.8.8-40.el5_9 | 4:5.8.8-40.el5_9 |
Show 189 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-suidperlRed Hat:enterprise_linux:5::server |
before 4:5.8.8-40.el5_9 | 4:5.8.8-40.el5_9 |
perlRed Hat:enterprise_linux:6::client |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::client |
before 1:0.38-130.el6_4 | 1:0.38-130.el6_4 |
perl-Archive-TarRed Hat:enterprise_linux:6::client |
before 0:1.58-130.el6_4 | 0:1.58-130.el6_4 |
perl-CGIRed Hat:enterprise_linux:6::client |
before 0:3.51-130.el6_4 | 0:3.51-130.el6_4 |
perl-CPANRed Hat:enterprise_linux:6::client |
before 0:1.9402-130.el6_4 | 0:1.9402-130.el6_4 |
perl-CPANPLUSRed Hat:enterprise_linux:6::client |
before 0:0.88-130.el6_4 | 0:0.88-130.el6_4 |
perl-Compress-Raw-Bzip2Red Hat:enterprise_linux:6::client |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::client |
before 1:2.020-130.el6_4 | 1:2.020-130.el6_4 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::client |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Digest-SHARed Hat:enterprise_linux:6::client |
before 1:5.47-130.el6_4 | 1:5.47-130.el6_4 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::client |
before 1:0.27-130.el6_4 | 1:0.27-130.el6_4 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::client |
before 0:1.28-130.el6_4 | 0:1.28-130.el6_4 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::client |
before 0:6.55-130.el6_4 | 0:6.55-130.el6_4 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::client |
before 1:2.2003.0-130.el6_4 | 1:2.2003.0-130.el6_4 |
perl-File-FetchRed Hat:enterprise_linux:6::client |
before 0:0.26-130.el6_4 | 0:0.26-130.el6_4 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::client |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-Bzip2Red Hat:enterprise_linux:6::client |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::client |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-ZlibRed Hat:enterprise_linux:6::client |
before 1:1.09-130.el6_4 | 1:1.09-130.el6_4 |
perl-IPC-CmdRed Hat:enterprise_linux:6::client |
before 1:0.56-130.el6_4 | 1:0.56-130.el6_4 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::client |
before 1:0.18-130.el6_4 | 1:0.18-130.el6_4 |
perl-Log-MessageRed Hat:enterprise_linux:6::client |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::client |
before 0:0.04-130.el6_4 | 0:0.04-130.el6_4 |
perl-Module-BuildRed Hat:enterprise_linux:6::client |
before 1:0.3500-130.el6_4 | 1:0.3500-130.el6_4 |
perl-Module-CoreListRed Hat:enterprise_linux:6::client |
before 0:2.18-130.el6_4 | 0:2.18-130.el6_4 |
perl-Module-LoadRed Hat:enterprise_linux:6::client |
before 1:0.16-130.el6_4 | 1:0.16-130.el6_4 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::client |
before 0:0.30-130.el6_4 | 0:0.30-130.el6_4 |
perl-Module-LoadedRed Hat:enterprise_linux:6::client |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Module-PluggableRed Hat:enterprise_linux:6::client |
before 1:3.90-130.el6_4 | 1:3.90-130.el6_4 |
perl-Object-AccessorRed Hat:enterprise_linux:6::client |
before 1:0.34-130.el6_4 | 1:0.34-130.el6_4 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::client |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Params-CheckRed Hat:enterprise_linux:6::client |
before 1:0.26-130.el6_4 | 1:0.26-130.el6_4 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::client |
before 1:1.40-130.el6_4 | 1:1.40-130.el6_4 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::client |
before 1:1.04-130.el6_4 | 1:1.04-130.el6_4 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::client |
before 1:3.13-130.el6_4 | 1:3.13-130.el6_4 |
perl-Term-UIRed Hat:enterprise_linux:6::client |
before 0:0.20-130.el6_4 | 0:0.20-130.el6_4 |
perl-Test-HarnessRed Hat:enterprise_linux:6::client |
before 0:3.17-130.el6_4 | 0:3.17-130.el6_4 |
perl-Test-SimpleRed Hat:enterprise_linux:6::client |
before 0:0.92-130.el6_4 | 0:0.92-130.el6_4 |
perl-Time-HiResRed Hat:enterprise_linux:6::client |
before 4:1.9721-130.el6_4 | 4:1.9721-130.el6_4 |
perl-Time-PieceRed Hat:enterprise_linux:6::client |
before 0:1.15-130.el6_4 | 0:1.15-130.el6_4 |
perl-coreRed Hat:enterprise_linux:6::client |
before 0:5.10.1-130.el6_4 | 0:5.10.1-130.el6_4 |
perl-debuginfoRed Hat:enterprise_linux:6::client |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-develRed Hat:enterprise_linux:6::client |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-libsRed Hat:enterprise_linux:6::client |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-parentRed Hat:enterprise_linux:6::client |
before 1:0.221-130.el6_4 | 1:0.221-130.el6_4 |
perl-suidperlRed Hat:enterprise_linux:6::client |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-versionRed Hat:enterprise_linux:6::client |
before 3:0.77-130.el6_4 | 3:0.77-130.el6_4 |
perlRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::computenode |
before 1:0.38-130.el6_4 | 1:0.38-130.el6_4 |
perl-Archive-TarRed Hat:enterprise_linux:6::computenode |
before 0:1.58-130.el6_4 | 0:1.58-130.el6_4 |
perl-CGIRed Hat:enterprise_linux:6::computenode |
before 0:3.51-130.el6_4 | 0:3.51-130.el6_4 |
perl-CPANRed Hat:enterprise_linux:6::computenode |
before 0:1.9402-130.el6_4 | 0:1.9402-130.el6_4 |
perl-CPANPLUSRed Hat:enterprise_linux:6::computenode |
before 0:0.88-130.el6_4 | 0:0.88-130.el6_4 |
perl-Compress-Raw-Bzip2Red Hat:enterprise_linux:6::computenode |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::computenode |
before 1:2.020-130.el6_4 | 1:2.020-130.el6_4 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::computenode |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Digest-SHARed Hat:enterprise_linux:6::computenode |
before 1:5.47-130.el6_4 | 1:5.47-130.el6_4 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::computenode |
before 1:0.27-130.el6_4 | 1:0.27-130.el6_4 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::computenode |
before 0:1.28-130.el6_4 | 0:1.28-130.el6_4 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::computenode |
before 0:6.55-130.el6_4 | 0:6.55-130.el6_4 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::computenode |
before 1:2.2003.0-130.el6_4 | 1:2.2003.0-130.el6_4 |
perl-File-FetchRed Hat:enterprise_linux:6::computenode |
before 0:0.26-130.el6_4 | 0:0.26-130.el6_4 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::computenode |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-Bzip2Red Hat:enterprise_linux:6::computenode |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::computenode |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-ZlibRed Hat:enterprise_linux:6::computenode |
before 1:1.09-130.el6_4 | 1:1.09-130.el6_4 |
perl-IPC-CmdRed Hat:enterprise_linux:6::computenode |
before 1:0.56-130.el6_4 | 1:0.56-130.el6_4 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::computenode |
before 1:0.18-130.el6_4 | 1:0.18-130.el6_4 |
perl-Log-MessageRed Hat:enterprise_linux:6::computenode |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::computenode |
before 0:0.04-130.el6_4 | 0:0.04-130.el6_4 |
perl-Module-BuildRed Hat:enterprise_linux:6::computenode |
before 1:0.3500-130.el6_4 | 1:0.3500-130.el6_4 |
perl-Module-CoreListRed Hat:enterprise_linux:6::computenode |
before 0:2.18-130.el6_4 | 0:2.18-130.el6_4 |
perl-Module-LoadRed Hat:enterprise_linux:6::computenode |
before 1:0.16-130.el6_4 | 1:0.16-130.el6_4 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::computenode |
before 0:0.30-130.el6_4 | 0:0.30-130.el6_4 |
perl-Module-LoadedRed Hat:enterprise_linux:6::computenode |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Module-PluggableRed Hat:enterprise_linux:6::computenode |
before 1:3.90-130.el6_4 | 1:3.90-130.el6_4 |
perl-Object-AccessorRed Hat:enterprise_linux:6::computenode |
before 1:0.34-130.el6_4 | 1:0.34-130.el6_4 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::computenode |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Params-CheckRed Hat:enterprise_linux:6::computenode |
before 1:0.26-130.el6_4 | 1:0.26-130.el6_4 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::computenode |
before 1:1.40-130.el6_4 | 1:1.40-130.el6_4 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::computenode |
before 1:1.04-130.el6_4 | 1:1.04-130.el6_4 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::computenode |
before 1:3.13-130.el6_4 | 1:3.13-130.el6_4 |
perl-Term-UIRed Hat:enterprise_linux:6::computenode |
before 0:0.20-130.el6_4 | 0:0.20-130.el6_4 |
perl-Test-HarnessRed Hat:enterprise_linux:6::computenode |
before 0:3.17-130.el6_4 | 0:3.17-130.el6_4 |
perl-Test-SimpleRed Hat:enterprise_linux:6::computenode |
before 0:0.92-130.el6_4 | 0:0.92-130.el6_4 |
perl-Time-HiResRed Hat:enterprise_linux:6::computenode |
before 4:1.9721-130.el6_4 | 4:1.9721-130.el6_4 |
perl-Time-PieceRed Hat:enterprise_linux:6::computenode |
before 0:1.15-130.el6_4 | 0:1.15-130.el6_4 |
perl-coreRed Hat:enterprise_linux:6::computenode |
before 0:5.10.1-130.el6_4 | 0:5.10.1-130.el6_4 |
perl-debuginfoRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-develRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-libsRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-parentRed Hat:enterprise_linux:6::computenode |
before 1:0.221-130.el6_4 | 1:0.221-130.el6_4 |
perl-suidperlRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-versionRed Hat:enterprise_linux:6::computenode |
before 3:0.77-130.el6_4 | 3:0.77-130.el6_4 |
perlRed Hat:enterprise_linux:6::server |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::server |
before 1:0.38-130.el6_4 | 1:0.38-130.el6_4 |
perl-Archive-TarRed Hat:enterprise_linux:6::server |
before 0:1.58-130.el6_4 | 0:1.58-130.el6_4 |
perl-CGIRed Hat:enterprise_linux:6::server |
before 0:3.51-130.el6_4 | 0:3.51-130.el6_4 |
perl-CPANRed Hat:enterprise_linux:6::server |
before 0:1.9402-130.el6_4 | 0:1.9402-130.el6_4 |
perl-CPANPLUSRed Hat:enterprise_linux:6::server |
before 0:0.88-130.el6_4 | 0:0.88-130.el6_4 |
perl-Compress-Raw-Bzip2Red Hat:enterprise_linux:6::server |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::server |
before 1:2.020-130.el6_4 | 1:2.020-130.el6_4 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::server |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Digest-SHARed Hat:enterprise_linux:6::server |
before 1:5.47-130.el6_4 | 1:5.47-130.el6_4 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::server |
before 1:0.27-130.el6_4 | 1:0.27-130.el6_4 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::server |
before 0:1.28-130.el6_4 | 0:1.28-130.el6_4 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::server |
before 0:6.55-130.el6_4 | 0:6.55-130.el6_4 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::server |
before 1:2.2003.0-130.el6_4 | 1:2.2003.0-130.el6_4 |
perl-File-FetchRed Hat:enterprise_linux:6::server |
before 0:0.26-130.el6_4 | 0:0.26-130.el6_4 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::server |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-Bzip2Red Hat:enterprise_linux:6::server |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::server |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-ZlibRed Hat:enterprise_linux:6::server |
before 1:1.09-130.el6_4 | 1:1.09-130.el6_4 |
perl-IPC-CmdRed Hat:enterprise_linux:6::server |
before 1:0.56-130.el6_4 | 1:0.56-130.el6_4 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::server |
before 1:0.18-130.el6_4 | 1:0.18-130.el6_4 |
perl-Log-MessageRed Hat:enterprise_linux:6::server |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::server |
before 0:0.04-130.el6_4 | 0:0.04-130.el6_4 |
perl-Module-BuildRed Hat:enterprise_linux:6::server |
before 1:0.3500-130.el6_4 | 1:0.3500-130.el6_4 |
perl-Module-CoreListRed Hat:enterprise_linux:6::server |
before 0:2.18-130.el6_4 | 0:2.18-130.el6_4 |
perl-Module-LoadRed Hat:enterprise_linux:6::server |
before 1:0.16-130.el6_4 | 1:0.16-130.el6_4 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::server |
before 0:0.30-130.el6_4 | 0:0.30-130.el6_4 |
perl-Module-LoadedRed Hat:enterprise_linux:6::server |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Module-PluggableRed Hat:enterprise_linux:6::server |
before 1:3.90-130.el6_4 | 1:3.90-130.el6_4 |
perl-Object-AccessorRed Hat:enterprise_linux:6::server |
before 1:0.34-130.el6_4 | 1:0.34-130.el6_4 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::server |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Params-CheckRed Hat:enterprise_linux:6::server |
before 1:0.26-130.el6_4 | 1:0.26-130.el6_4 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::server |
before 1:1.40-130.el6_4 | 1:1.40-130.el6_4 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::server |
before 1:1.04-130.el6_4 | 1:1.04-130.el6_4 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::server |
before 1:3.13-130.el6_4 | 1:3.13-130.el6_4 |
perl-Term-UIRed Hat:enterprise_linux:6::server |
before 0:0.20-130.el6_4 | 0:0.20-130.el6_4 |
perl-Test-HarnessRed Hat:enterprise_linux:6::server |
before 0:3.17-130.el6_4 | 0:3.17-130.el6_4 |
perl-Test-SimpleRed Hat:enterprise_linux:6::server |
before 0:0.92-130.el6_4 | 0:0.92-130.el6_4 |
perl-Time-HiResRed Hat:enterprise_linux:6::server |
before 4:1.9721-130.el6_4 | 4:1.9721-130.el6_4 |
perl-Time-PieceRed Hat:enterprise_linux:6::server |
before 0:1.15-130.el6_4 | 0:1.15-130.el6_4 |
perl-coreRed Hat:enterprise_linux:6::server |
before 0:5.10.1-130.el6_4 | 0:5.10.1-130.el6_4 |
perl-debuginfoRed Hat:enterprise_linux:6::server |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-develRed Hat:enterprise_linux:6::server |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-libsRed Hat:enterprise_linux:6::server |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-parentRed Hat:enterprise_linux:6::server |
before 1:0.221-130.el6_4 | 1:0.221-130.el6_4 |
perl-suidperlRed Hat:enterprise_linux:6::server |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-versionRed Hat:enterprise_linux:6::server |
before 3:0.77-130.el6_4 | 3:0.77-130.el6_4 |
perlRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::workstation |
before 1:0.38-130.el6_4 | 1:0.38-130.el6_4 |
perl-Archive-TarRed Hat:enterprise_linux:6::workstation |
before 0:1.58-130.el6_4 | 0:1.58-130.el6_4 |
perl-CGIRed Hat:enterprise_linux:6::workstation |
before 0:3.51-130.el6_4 | 0:3.51-130.el6_4 |
perl-CPANRed Hat:enterprise_linux:6::workstation |
before 0:1.9402-130.el6_4 | 0:1.9402-130.el6_4 |
perl-CPANPLUSRed Hat:enterprise_linux:6::workstation |
before 0:0.88-130.el6_4 | 0:0.88-130.el6_4 |
perl-Compress-Raw-Bzip2Red Hat:enterprise_linux:6::workstation |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::workstation |
before 1:2.020-130.el6_4 | 1:2.020-130.el6_4 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::workstation |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-Digest-SHARed Hat:enterprise_linux:6::workstation |
before 1:5.47-130.el6_4 | 1:5.47-130.el6_4 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::workstation |
before 1:0.27-130.el6_4 | 1:0.27-130.el6_4 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::workstation |
before 0:1.28-130.el6_4 | 0:1.28-130.el6_4 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::workstation |
before 0:6.55-130.el6_4 | 0:6.55-130.el6_4 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::workstation |
before 1:2.2003.0-130.el6_4 | 1:2.2003.0-130.el6_4 |
perl-File-FetchRed Hat:enterprise_linux:6::workstation |
before 0:0.26-130.el6_4 | 0:0.26-130.el6_4 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::workstation |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-Bzip2Red Hat:enterprise_linux:6::workstation |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::workstation |
before 0:2.020-130.el6_4 | 0:2.020-130.el6_4 |
perl-IO-ZlibRed Hat:enterprise_linux:6::workstation |
before 1:1.09-130.el6_4 | 1:1.09-130.el6_4 |
perl-IPC-CmdRed Hat:enterprise_linux:6::workstation |
before 1:0.56-130.el6_4 | 1:0.56-130.el6_4 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::workstation |
before 1:0.18-130.el6_4 | 1:0.18-130.el6_4 |
perl-Log-MessageRed Hat:enterprise_linux:6::workstation |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::workstation |
before 0:0.04-130.el6_4 | 0:0.04-130.el6_4 |
perl-Module-BuildRed Hat:enterprise_linux:6::workstation |
before 1:0.3500-130.el6_4 | 1:0.3500-130.el6_4 |
perl-Module-CoreListRed Hat:enterprise_linux:6::workstation |
before 0:2.18-130.el6_4 | 0:2.18-130.el6_4 |
perl-Module-LoadRed Hat:enterprise_linux:6::workstation |
before 1:0.16-130.el6_4 | 1:0.16-130.el6_4 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::workstation |
before 0:0.30-130.el6_4 | 0:0.30-130.el6_4 |
perl-Module-LoadedRed Hat:enterprise_linux:6::workstation |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Module-PluggableRed Hat:enterprise_linux:6::workstation |
before 1:3.90-130.el6_4 | 1:3.90-130.el6_4 |
perl-Object-AccessorRed Hat:enterprise_linux:6::workstation |
before 1:0.34-130.el6_4 | 1:0.34-130.el6_4 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::workstation |
before 1:0.02-130.el6_4 | 1:0.02-130.el6_4 |
perl-Params-CheckRed Hat:enterprise_linux:6::workstation |
before 1:0.26-130.el6_4 | 1:0.26-130.el6_4 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::workstation |
before 1:1.40-130.el6_4 | 1:1.40-130.el6_4 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::workstation |
before 1:1.04-130.el6_4 | 1:1.04-130.el6_4 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::workstation |
before 1:3.13-130.el6_4 | 1:3.13-130.el6_4 |
perl-Term-UIRed Hat:enterprise_linux:6::workstation |
before 0:0.20-130.el6_4 | 0:0.20-130.el6_4 |
perl-Test-HarnessRed Hat:enterprise_linux:6::workstation |
before 0:3.17-130.el6_4 | 0:3.17-130.el6_4 |
perl-Test-SimpleRed Hat:enterprise_linux:6::workstation |
before 0:0.92-130.el6_4 | 0:0.92-130.el6_4 |
perl-Time-HiResRed Hat:enterprise_linux:6::workstation |
before 4:1.9721-130.el6_4 | 4:1.9721-130.el6_4 |
perl-Time-PieceRed Hat:enterprise_linux:6::workstation |
before 0:1.15-130.el6_4 | 0:1.15-130.el6_4 |
perl-coreRed Hat:enterprise_linux:6::workstation |
before 0:5.10.1-130.el6_4 | 0:5.10.1-130.el6_4 |
perl-debuginfoRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-develRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-libsRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-parentRed Hat:enterprise_linux:6::workstation |
before 1:0.221-130.el6_4 | 1:0.221-130.el6_4 |
perl-suidperlRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-130.el6_4 | 4:5.10.1-130.el6_4 |
perl-versionRed Hat:enterprise_linux:6::workstation |
before 3:0.77-130.el6_4 | 3:0.77-130.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5526 is a medium vulnerability (CVSS 5.0) in Andy Armstrong Cgi.pm, published November 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.26%, the 88th percentile. Fixed in libcgi-pm-perl 3.61-2.
References
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
exchange.xforce.ibmcloud.com/vulnerabilities/80098
secunia.com/advisories/55314
securityfocus.com/bid/56562
cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.63/Changes
ubuntu.com/usn/USN-1643-1
Show 32 moreShow less
securitytracker.com/id?1027780
debian.org/security/2012/dsa-2586
rhn.redhat.com/errata/RHSA-2013-0685.html
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
github.com/markstos/CGI.pm/pull/23
openwall.com/lists/oss-security/2012/11/15/6
secunia.com/advisories/51457
kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
nvd.nist.gov/vuln/detail/CVE-2012-5526
github.com/advisories/GHSA-9x3m-wmpr-vc58
security-tracker.debian.org/tracker/CVE-2012-5526
access.redhat.com/errata/RHSA-2013:0685
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=862413
bugzilla.redhat.com/show_bug.cgi?id=877015
bugzilla.redhat.com/show_bug.cgi?id=884354
bugzilla.redhat.com/show_bug.cgi?id=912276
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0685.json
access.redhat.com/security/cve/CVE-2012-5195
cve.org/CVERecord?id=CVE-2012-5195
nvd.nist.gov/vuln/detail/CVE-2012-5195
access.redhat.com/security/cve/CVE-2012-5526
cve.org/CVERecord?id=CVE-2012-5526
access.redhat.com/security/cve/CVE-2012-6329
cve.org/CVERecord?id=CVE-2012-6329
nvd.nist.gov/vuln/detail/CVE-2012-6329
access.redhat.com/security/cve/CVE-2013-1667
cve.org/CVERecord?id=CVE-2013-1667
nvd.nist.gov/vuln/detail/CVE-2013-1667
ubuntu.com/security/CVE-2012-5526
openwall.com/lists/oss-security/2012/11/15/4
ubuntu.com/security/notices/USN-1643-1