CVE-2010-4803: Input Validation
Published May 3, 2011
·Updated
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors.
Affected Software
58 affected components
Mojolicious Mojolicious<=0.999926
Mojolicious Mojolicious=0.2
Mojolicious Mojolicious=0.3
Mojolicious Mojolicious=0.4
Mojolicious Mojolicious=0.5
Mojolicious Mojolicious=0.6
Mojolicious Mojolicious=0.7
Mojolicious Mojolicious=0.8
Mojolicious Mojolicious=0.8.1
Mojolicious Mojolicious=0.8.2
Mojolicious Mojolicious=0.8.3
Mojolicious Mojolicious=0.8.4
Mojolicious Mojolicious=0.8.5
Mojolicious Mojolicious=0.9
Mojolicious Mojolicious=0.8006
Mojolicious Mojolicious=0.8007
Mojolicious Mojolicious=0.8008
Mojolicious Mojolicious=0.8009
Mojolicious Mojolicious=0.9001
Mojolicious Mojolicious=0.9002
Mojolicious Mojolicious=0.991231
Mojolicious Mojolicious=0.991232
Mojolicious Mojolicious=0.991233
Mojolicious Mojolicious=0.991234
Mojolicious Mojolicious=0.991235
Mojolicious Mojolicious=0.991236
Mojolicious Mojolicious=0.991237
Mojolicious Mojolicious=0.991238
Mojolicious Mojolicious=0.991239
Mojolicious Mojolicious=0.991240
Mojolicious Mojolicious=0.991241
Mojolicious Mojolicious=0.991242
Mojolicious Mojolicious=0.991243
Mojolicious Mojolicious=0.991244
Mojolicious Mojolicious=0.991245
Mojolicious Mojolicious=0.991246
Mojolicious Mojolicious=0.991250
Mojolicious Mojolicious=0.991251
Mojolicious Mojolicious=0.999901
Mojolicious Mojolicious=0.999902
Mojolicious Mojolicious=0.999903
Mojolicious Mojolicious=0.999904
Mojolicious Mojolicious=0.999905
Mojolicious Mojolicious=0.999906
Mojolicious Mojolicious=0.999907
Mojolicious Mojolicious=0.999908
Mojolicious Mojolicious=0.999909
Mojolicious Mojolicious=0.999910
Mojolicious Mojolicious=0.999911
Mojolicious Mojolicious=0.999912
Mojolicious Mojolicious=0.999913
Mojolicious Mojolicious=0.999914
Mojolicious Mojolicious=0.999920
Mojolicious Mojolicious=0.999921
Mojolicious Mojolicious=0.999922
Mojolicious Mojolicious=0.999923
Mojolicious Mojolicious=0.999924
Mojolicious Mojolicious=0.999925
Remediation
Patch Available
Event History
May 3, 2011
CVE Published
via MITRE·12:03 AM
Data Sourced
via MITRE·12:03 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4803?
CVE-2010-4803 has a severity of medium due to improper HMAC-MD5 checksums that could lead to unspecified impacts and potential remote attacks.
2
How do I fix CVE-2010-4803?
To fix CVE-2010-4803, upgrade Mojolicious to version 0.999927 or later, which includes the necessary security fixes.
3
What is vulnerable in CVE-2010-4803?
CVE-2010-4803 affects Mojolicious versions prior to 0.999927, specifically 0.8007 and others listed up to 0.999926.
4
Can CVE-2010-4803 be exploited remotely?
Yes, CVE-2010-4803 can be exploited remotely due to its vulnerabilities in the HMAC-MD5 checksum implementations.
5
What kind of impact does CVE-2010-4803 have?
The impact of CVE-2010-4803 is unspecified, but it poses a risk related to the integrity of checksum verification in Mojolicious.