Skip to content
OpenAdvisories

Package · Debian

libcgi-session-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.9
    CVE-2026-56016

    CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

    CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand() function. All three are pr…

    MARKSTOS CGI::Session::ID::md5 libcgi-session-perl libcgi-session-perl Debian Ubuntu Alpine
  • Unscored —
    CVE-2006-1280

    CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_f…

    libcgi-session-perl Debian
  • Unscored —
    CVE-2006-1279

    CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1)…

    libcgi-session-perl Debian