Test ID:	1.3.6.1.4.1.25623.1.0.70366
Category:	Fedora Local Security Checks
Title:	Fedora Core 16 FEDORA-2011-13130 (perl-FCGI)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to perl-FCGI announced via advisory FEDORA-2011-13130. Update Information: This update to the latest upstream version resolves cve-2011-2766 - stop leaking information across requests when using the deprecated and undocumented old FCGI interface. This update resolves cve-2011-2766. References: [ 1 ] Bug #736604 - CVE-2011-2766 perl-FCGI, fcgi: Certain environment variables shared between first and subsequent HTTP requests https://bugzilla.redhat.com/show_bug.cgi?id=736604 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update perl-FCGI' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-13130 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2766 BugTraq ID: 49549 http://www.securityfocus.com/bid/49549 Debian Security Information: DSA-2327 (Google Search) http://www.debian.org/security/2011/dsa-2327 http://www.mandriva.com/security/advisories?name=MDVSA-2012:001 http://www.openwall.com/lists/oss-security/2011/09/08/1 http://www.openwall.com/lists/oss-security/2011/09/08/2 SuSE Security Announcement: openSUSE-SU-2012:0004 (Google Search) https://hermes.opensuse.org/messages/13154637 SuSE Security Announcement: openSUSE-SU-2012:0036 (Google Search) https://hermes.opensuse.org/messages/13155253 XForce ISS Database: perlfast-cgi-security-bypass(69709) https://exchange.xforce.ibmcloud.com/vulnerabilities/69709
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.