UBUNTU-CVE-2016-1000111

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-1000111

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1000111.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-1000111

Related

Published

2016-07-18T00:00:00Z

Modified

2025-01-13T10:21:18Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

References

Affected packages

Ubuntu:14.04:LTS / twisted

Package

Name: twisted
Purl: pkg:deb/ubuntu/twisted@13.2.0-1ubuntu1.2?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

13.2.0-1ubuntu1.2

Affected versions

13.*

13.0.0-1ubuntu1

13.2.0-1ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-bin"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-bin-dbg"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-bin-dbgsym"
        },
        {
            "binary_version": "1:13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-conch"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-core"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-lore"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-mail"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-names"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-news"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-runner"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-runner-dbg"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-runner-dbgsym"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-web"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "python-twisted-words"
        },
        {
            "binary_version": "13.2.0-1ubuntu1.2",
            "binary_name": "twisted-doc"
        }
    ]
}

Ubuntu:16.04:LTS / twisted

Package

Name: twisted
Purl: pkg:deb/ubuntu/twisted@16.0.0-1ubuntu0.2?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

16.0.0-1ubuntu0.2

Affected versions

15.*

15.2.1-1ubuntu2

15.5.0-1

15.5.0-2

15.5.0-2ubuntu1

15.5.0-4

16.*

16.0.0~pre1-1

16.0.0~pre1-1ubuntu1

16.0.0~pre1-2ubuntu1

16.0.0~pre1-3

16.0.0-1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-bin"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-bin-dbg"
        },
        {
            "binary_version": "1:16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-conch"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-core"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-mail"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-names"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-news"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-runner"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-runner-dbg"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-web"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python-twisted-words"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "python3-twisted"
        },
        {
            "binary_version": "16.0.0-1ubuntu0.2",
            "binary_name": "twisted-doc"
        }
    ]
}

Ubuntu:18.04:LTS / twisted

Package

Name: twisted
Purl: pkg:deb/ubuntu/twisted@17.9.0-1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

17.9.0-1

Affected versions

16.*

16.6.0-2ubuntu3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-bin"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-bin-dbg"
        },
        {
            "binary_version": "1:17.9.0-1",
            "binary_name": "python-twisted-conch"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-core"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-mail"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-names"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-news"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-runner"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-runner-dbg"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-web"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python-twisted-words"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python3-twisted"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python3-twisted-bin"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "python3-twisted-bin-dbg"
        },
        {
            "binary_version": "17.9.0-1",
            "binary_name": "twisted-doc"
        }
    ]
}