CVE-2016-1000110: Medium severity python 2.7 vulnerability
Dominic Scheirlinck of VendHQ reports:
Many software projects and vendors have implemented support for the “Proxy” request header in their respective CGI implementations and languages by creating the “HTTPPROXY” environmental variable based on the header value. When this variable is used (in many cases automatically by various HTTP client libraries) any outgoing requests generated in turn from the attackers original request can be redirected to an attacker controlled proxy. This allows attackers to view potentially sensitive information, reply with malformed data, or to hold connections open causing a potential denial of service.
Other sources
The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2016-1000110.
What is the severity of CVE-2016-1000110?
The severity of CVE-2016-1000110 is medium.
Which software versions are affected by CVE-2016-1000110?
Python versions 2.7.0 to 2.7.13, 3.3.0 to 3.3.7, 3.4.0 to 3.4.6, and 3.5.0 to 3.5.3 are affected. Debian Linux 8.0, 9.0, and 10.0 are also affected.
How can a remote attacker exploit CVE-2016-1000110?
A remote attacker can exploit CVE-2016-1000110 by redirecting HTTP requests using the HTTP_PROXY variable name in a CGI script.
Is there a fix for CVE-2016-1000110?
Yes, there are fixes available. Python versions 2.7.16-2+deb10u1, 2.7.16-2+deb10u3, and 2.7.18-8+deb11u1 have fixes for this vulnerability.