CVE ID:	CVE-2011-2766
Description:	The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
Test IDs:	1.3.6.1.4.1.25623.1.0.70366   1.3.6.1.4.1.25623.1.0.70542   1.3.6.1.4.1.25623.1.0.72089   1.3.6.1.4.1.25623.1.0.863560   1.3.6.1.4.1.25623.1.0.863561   1.3.6.1.4.1.25623.1.0.120515   1.3.6.1.4.1.25623.1.0.863985   1.3.6.1.4.1.25623.1.0.831521
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2766 BugTraq ID: 49549 http://www.securityfocus.com/bid/49549 Debian Security Information: DSA-2327 (Google Search) http://www.debian.org/security/2011/dsa-2327 http://www.mandriva.com/security/advisories?name=MDVSA-2012:001 http://www.openwall.com/lists/oss-security/2011/09/08/1 http://www.openwall.com/lists/oss-security/2011/09/08/2 SuSE Security Announcement: openSUSE-SU-2012:0004 (Google Search) https://hermes.opensuse.org/messages/13154637 SuSE Security Announcement: openSUSE-SU-2012:0036 (Google Search) https://hermes.opensuse.org/messages/13155253 XForce ISS Database: perlfast-cgi-security-bypass(69709) https://exchange.xforce.ibmcloud.com/vulnerabilities/69709