SecuritySpace - CVE-2016-1000111

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-1000111

Description: Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Test IDs: 1.3.6.1.4.1.25623.1.1.10.2016.0340 1.3.6.1.4.1.25623.1.0.871666 1.3.6.1.4.1.25623.1.0.843675 1.3.6.1.4.1.25623.1.0.882568 1.3.6.1.4.1.25623.1.0.882570 1.3.6.1.4.1.25623.1.1.4.2017.0114.1

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-1000111
https://www.openwall.com/lists/oss-security/2016/07/18/6

CVE ID:	CVE-2016-1000111
Description:	Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2016.0340 1.3.6.1.4.1.25623.1.0.871666 1.3.6.1.4.1.25623.1.0.843675 1.3.6.1.4.1.25623.1.0.882568 1.3.6.1.4.1.25623.1.0.882570 1.3.6.1.4.1.25623.1.1.4.2017.0114.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1000111 https://www.openwall.com/lists/oss-security/2016/07/18/6