Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities

The Perl Safe module is prone to multiple restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary Perl code outside of the restricted root. Versions prior to Safe 2.27 are vulnerable. OpenVAS Vulnerability Test $Id: gbperlsafe40305.nasl 5323 2017-02-17...

perl security update

CentOS Errata and Security Advisory CESA-2010:0458 Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RedHat Update for perl RHSA-2010:0457-01

Check for the Version of perl OpenVAS Vulnerability Test RedHat Update for perl RHSA-2010:0457-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Moderate: Red Hat Security Advisory: perl security update

Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Moderate: Red Hat Security Advisory: perl security update

Updated perl packages that fix two security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

perl security update

3:5.8.5-52.el4 - build system contains new rpm, which can't create list of header files anymore failure of rpm -ql. Arch specific files contain list of all header files for RHEL-4 or mentioned packages. - Related: rhbz591160 3:5.8.5-50.el4 - CVE-2010-1168 perl Safe: Intended restriction bypass vi...

PostgreSQL PL/perl和PL/tcl存储过程绕过安全限制漏洞

BUGTRAQ ID: 40215 CVE ID: CVE-2010-1169,CVE-2010-1170,CVE-2010-1447 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL的PL/perl和PL/tcl存储过程中存在错误的权限检查，用户可以绕过pltclmodules表等安全限制执行任意 Perl或Tcl脚本。 PostgreSQL 8.4 PostgreSQL 8.3 PostgreSQL 8.2 PostgreSQL 8.1 PostgreSQL 8.0 PostgreSQL 7.4 厂商补丁： PostgreSQ...

CVE-2010-1447

The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...

CVE-2010-1447

The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...

CVE-2010-1447

CVE-2010-1447 affects the Safe.pm (Safe) module in Perl (2.26 and earlier), enabling context-dependent bypasses of Safe::reval and Safe::rdo and allowing remote code execution via crafted scripts. It is linked to PostgreSQL PL/Perl vulnerabilities across multiple PostgreSQL version lines (7.4–9.0...

CVE-2010-1447

The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...

Mac OS X 10.5.5 Update / Security Update 2008-006

The remote host is missing Mac OS X 10.5.5 Update / Security Update 2008-006. One or more of the following components are affected: ATS BIND ClamAV Directory Services Finder ImageIO Kernel libresolv Login Window mDNSResponder OpenSSH QuickDraw Manager Ruby SearchKit System Configuration System...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

Mandriva Update for tkcvs MDVA-2010:115 (tkcvs)

Check for the Version of tkcvs OpenVAS Vulnerability Test Mandriva Update for tkcvs MDVA-2010:115 tkcvs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

rPSA-2010-0018-1 bind bind-utils caching-nameserver

rPath Security Advisory: 2010-0018-1 Published: 2010-03-15 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote User Deterministic Vulnerability Updated Versions:...

SLES9: Security update for bind

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: bind bind-devel bind-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SuSE9 Security Update : bind (YOU Patch Number 12197)

The transaction id and the udp source port used for DNS queries by the bind nameserver were predictable. Attackers could potentially exploit that weakness to manipulate the DNS cache 'DNS cache poisoning', CVE-2008-1447. Additionally the root.hint zone file was updated to contain the new IP numbe...

openSUSE Security Update : dnsmasq (dnsmasq-147)

This update of dnsmasq uses random UDP source ports and a random TRXID now. CVE-2008-1447 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dnsmasq-147. The text description of this plugin is C...

openSUSE Security Update : bind (bind-82)

The transaction id and the UDP source port used for DNS queries by the bind nameserver were predicatable. Attackers could potentially exploit that weakness to manipulate the DNS cache 'DNS cache poisoning', CVE-2008-1447. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Mandriva Linux Security Advisory : bind (MDVSA-2008:139)

A weakness was found in the DNS protocol by Dan Kaminsky. A remote attacker could exploit this weakness to spoof DNS entries and poison DNS caches. This could be used to misdirect users and services; i.e. for web and email traffic CVE-2008-1447. This update provides the latest stable BIND release...