Test ID:	1.3.6.1.4.1.25623.1.1.10.2016.0340
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0340)
Summary:	The remote host is missing an update for the 'python-twisted-web' package(s) announced via the MGASA-2016-0340 advisory.
Description:	Summary: The remote host is missing an update for the 'python-twisted-web' package(s) announced via the MGASA-2016-0340 advisory. Vulnerability Insight: It was discovered that python-twisted-web used the value of the Proxy header from HTTP requests to initialize the HTTP_PROXY environment variable for CGI scripts, which in turn was incorrectly used by certain HTTP client implementations to configure the proxy for outgoing HTTP requests. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a CGI script to an attacker-controlled proxy via a malicious HTTP request. (CVE-2016-1000111) Affected Software/OS: 'python-twisted-web' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1000111 https://www.openwall.com/lists/oss-security/2016/07/18/6
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.