CVE-2016-1000108

yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

• CWE-601

• http://www.openwall.com/lists/oss-security/2016/07/18/6Mailing List, Third Party Advisory
• https://github.com/klacke/yaws/commit/9d8fb070e782c95821c90d0ca7372fc6d7316c78#diff-54053c47eb173a90c26ed19bd9d106c1Patch, Third Party Advisory
• https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000108.jsonThird Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-1000108Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/18/6Mailing List, Third Party Advisory
• https://github.com/klacke/yaws/commit/9d8fb070e782c95821c90d0ca7372fc6d7316c78#diff-54053c47eb173a90c26ed19bd9d106c1Patch, Third Party Advisory
• https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000108.jsonThird Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-1000108Third Party Advisory

Published

Dec 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000102Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-1000103Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-1000104A security Bypass vulnerability exists in the FcgidPassHeade…8.8
• CVE-2016-1000105Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-1000106Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-1000107inets in Erlang possibly 22.1 and earlier follows RFC 3875 s…6.1
• CVE-2016-1000109HHVM does not attempt to address RFC 3875 section 4.1.18 nam…5.3
• CVE-2016-1000110The CGIHandler class in Python before 2.7.12 does not protec…6.1
• CVE-2016-1000111Twisted before 16.3.1 does not attempt to address RFC 3875 s…5.3
• CVE-2016-1000112Unauthenticated remote .jpg file upload in contus-video-comm…9.1
• CVE-2016-1000113XSS and SQLi in huge IT gallery v1.1.5 for Joomla9.8
• CVE-2016-1000114XSS in huge IT gallery v1.1.5 for Joomla6.1