FastCGI security update
This update fixes the following security issues:
- 735882: FastCGI: bypass authentication (CVE-2011-2766)
-
Submitted by
Adrian Schröter (adrianSuSE)
- Version 5575
Fixed bugs
bnc#735882
VUL-0: FastCGI: bypass authentication
CVE#CVE-2011-2766
The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
