CVE-2016-1000110

Name of the Vulnerable Software and Affected Versions Python versions prior to 2.7.12

Description The issue concerns a variable name clash in a CGI script, potentially allowing a remote attacker to redirect HTTP requests. This is related to the HTTP PROXY variable.

Recommendations For versions prior to 2.7.12, consider updating to version 2.7.12 or later to resolve the issue. As a temporary workaround, restrict access to CGI scripts that use the HTTP PROXY variable until a patch is applied. Avoid using the HTTP PROXY variable in affected CGI scripts until the issue is resolved.