Vulnerability in Nathan Neulinger Cgiwrap

CVE-2005-3255

The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs.

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)