CVE-2010-4803: Input Validation
First published: Tue May 03 2011(Updated: )
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mojolicious | <=0.999926 | |
| Mojolicious | =0.2 | |
| Mojolicious | =0.3 | |
| Mojolicious | =0.4 | |
| Mojolicious | =0.5 | |
| Mojolicious | =0.6 | |
| Mojolicious | =0.7 | |
| Mojolicious | =0.8 | |
| Mojolicious | =0.8.1 | |
| Mojolicious | =0.8.2 | |
| Mojolicious | =0.8.3 | |
| Mojolicious | =0.8.4 | |
| Mojolicious | =0.8.5 | |
| Mojolicious | =0.9 | |
| Mojolicious | =0.8006 | |
| Mojolicious | =0.8007 | |
| Mojolicious | =0.8008 | |
| Mojolicious | =0.8009 | |
| Mojolicious | =0.9001 | |
| Mojolicious | =0.9002 | |
| Mojolicious | =0.991231 | |
| Mojolicious | =0.991232 | |
| Mojolicious | =0.991233 | |
| Mojolicious | =0.991234 | |
| Mojolicious | =0.991235 | |
| Mojolicious | =0.991236 | |
| Mojolicious | =0.991237 | |
| Mojolicious | =0.991238 | |
| Mojolicious | =0.991239 | |
| Mojolicious | =0.991240 | |
| Mojolicious | =0.991241 | |
| Mojolicious | =0.991242 | |
| Mojolicious | =0.991243 | |
| Mojolicious | =0.991244 | |
| Mojolicious | =0.991245 | |
| Mojolicious | =0.991246 | |
| Mojolicious | =0.991250 | |
| Mojolicious | =0.991251 | |
| Mojolicious | =0.999901 | |
| Mojolicious | =0.999902 | |
| Mojolicious | =0.999903 | |
| Mojolicious | =0.999904 | |
| Mojolicious | =0.999905 | |
| Mojolicious | =0.999906 | |
| Mojolicious | =0.999907 | |
| Mojolicious | =0.999908 | |
| Mojolicious | =0.999909 | |
| Mojolicious | =0.999910 | |
| Mojolicious | =0.999911 | |
| Mojolicious | =0.999912 | |
| Mojolicious | =0.999913 | |
| Mojolicious | =0.999914 | |
| Mojolicious | =0.999920 | |
| Mojolicious | =0.999921 | |
| Mojolicious | =0.999922 | |
| Mojolicious | =0.999923 | |
| Mojolicious | =0.999924 | |
| Mojolicious | =0.999925 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-4803?
CVE-2010-4803 has a severity of medium due to improper HMAC-MD5 checksums that could lead to unspecified impacts and potential remote attacks.
How do I fix CVE-2010-4803?
To fix CVE-2010-4803, upgrade Mojolicious to version 0.999927 or later, which includes the necessary security fixes.
What is vulnerable in CVE-2010-4803?
CVE-2010-4803 affects Mojolicious versions prior to 0.999927, specifically 0.8007 and others listed up to 0.999926.
Can CVE-2010-4803 be exploited remotely?
Yes, CVE-2010-4803 can be exploited remotely due to its vulnerabilities in the HMAC-MD5 checksum implementations.
What kind of impact does CVE-2010-4803 have?
The impact of CVE-2010-4803 is unspecified, but it poses a risk related to the integrity of checksum verification in Mojolicious.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/mojolicious
- canonical/mojolicious
- version/mojolicious/0.999926
- version/mojolicious/0.2
- version/mojolicious/0.3
- version/mojolicious/0.4
- version/mojolicious/0.5
- version/mojolicious/0.6
- version/mojolicious/0.7
- version/mojolicious/0.8
- version/mojolicious/0.8.1
- version/mojolicious/0.8.2
- version/mojolicious/0.8.3
- version/mojolicious/0.8.4
- version/mojolicious/0.8.5
- version/mojolicious/0.9
- version/mojolicious/0.8006
- version/mojolicious/0.8007
- version/mojolicious/0.8008
- version/mojolicious/0.8009
- version/mojolicious/0.9001
- version/mojolicious/0.9002
- version/mojolicious/0.991231
- version/mojolicious/0.991232
- version/mojolicious/0.991233
- version/mojolicious/0.991234
- version/mojolicious/0.991235
- version/mojolicious/0.991236
- version/mojolicious/0.991237
- version/mojolicious/0.991238
- version/mojolicious/0.991239
- version/mojolicious/0.991240
- version/mojolicious/0.991241
- version/mojolicious/0.991242
- version/mojolicious/0.991243
- version/mojolicious/0.991244
- version/mojolicious/0.991245
- version/mojolicious/0.991246
- version/mojolicious/0.991250
- version/mojolicious/0.991251
- version/mojolicious/0.999901
- version/mojolicious/0.999902
- version/mojolicious/0.999903
- version/mojolicious/0.999904
- version/mojolicious/0.999905
- version/mojolicious/0.999906
- version/mojolicious/0.999907
- version/mojolicious/0.999908
- version/mojolicious/0.999909
- version/mojolicious/0.999910
- version/mojolicious/0.999911
- version/mojolicious/0.999912
- version/mojolicious/0.999913
- version/mojolicious/0.999914
- version/mojolicious/0.999920
- version/mojolicious/0.999921
- version/mojolicious/0.999922
- version/mojolicious/0.999923
- version/mojolicious/0.999924
- version/mojolicious/0.999925