Lucene search

[email protected]CVE-2004-2286

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2286

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2286

activeperl

integer overflow

buffer overflow

denial of service

remote attackers

nvd

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

JSON

Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.

CPENameOperatorVersion
activestate:activeperlactivestate activeperleq5.7.2
larry_wall:perllarry wall perleq5.6
larry_wall:perllarry wall perleq5.8.0
larry_wall:perllarry wall perleq5.4
activestate:activeperlactivestate activeperleq5.6.2
activestate:activeperlactivestate activeperleq5.6.3
larry_wall:perllarry wall perleq5.5
activestate:activeperlactivestate activeperleq5.8.3
activestate:activeperlactivestate activeperleq5.6.1
activestate:activeperlactivestate activeperleq5.7.1

CPE	Name	Operator	Version
activestate:activeperl	activestate activeperl	eq	5.7.2
larry_wall:perl	larry wall perl	eq	5.6
larry_wall:perl	larry wall perl	eq	5.8.0
larry_wall:perl	larry wall perl	eq	5.4
activestate:activeperl	activestate activeperl	eq	5.6.2
activestate:activeperl	activestate activeperl	eq	5.6.3
larry_wall:perl	larry wall perl	eq	5.5
activestate:activeperl	activestate activeperl	eq	5.8.3
activestate:activeperl	activestate activeperl	eq	5.6.1
activestate:activeperl	activestate activeperl	eq	5.7.1

Rows per page:

1-10 of 201

References

archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html

www.securityfocus.com/bid/10380

exchange.xforce.ibmcloud.com/vulnerabilities/16224

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

JSON

Related for CVE-2004-2286

kaspersky1