139 matches found
Debian Security Advisory DSA 2265-1 (perl)
The remote host is missing an update to perl announced via advisory DSA 2265-1. OpenVAS Vulnerability Test $Id: deb22651.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2265-1 perl Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
[SECURITY] [DSA 2265-1] perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2265-1 [email protected] http://www.debian.org/security/ Florian Weimer June 20, 2011 http://www.debian.org/security/faq -...
perl security and bug fix update
5.10.1-119 - 692862 - lc launders tainted flag, CVE-2011-1487 - make SOURCE1 executable, because it missed +x in brew - Resolves: rhbz692862 5.10.1-118 - Correct perl-5.10.1-rt77352.patch - Related: rhbz640720 5.10.1-117 - 671352 CGI-3.51 security update - Resolves: rhbz671352 5.10.1-116 - requir...
Mandriva Update for perl MDVSA-2011:091 (perl)
Check for the Version of perl OpenVAS Vulnerability Test Mandriva Update for perl MDVSA-2011:091 perl Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
SuSE 10 Security Update : Perl (ZYPP Patch Number 7508)
This update fixes a bug in perl that allowed bypassing taint mode by using lc or uc. CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and Access Control. CWE-264 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is ...
openSUSE Security Update : perl (openSUSE-SU-2011:0479-1)
This update fixes a bug in perl that makes spamassassin crash and does not allow bypassing taint mode by using lc or uc anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P - CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and...
Ubuntu: Security Advisory (USN-1129-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1129-1: Perl vulnerabilities
It was discovered that the Safe.pm Perl module incorrectly handled Safe::reval and Safe::rdo access restrictions. An attacker could use this flaw to bypass intended restrictions and possibly execute arbitrary code. CVE-2010-1168, CVE-2010-1447 It was discovered that the CGI.pm Perl module...
Fedora Update for perl FEDORA-2011-4918
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : perl-5.10.1-123.fc13 (2011-4918)
Security bug: lc launder tainted data http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora Update for perl FEDORA-2011-4610
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 15 : perl-5.12.3-156.fc15 (2011-4631)
Security bug: lc launder tainted data http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 Cwd.so should go the subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...
Fedora 14 : perl-5.12.3-143.fc14 (2011-4610)
Security bug: lc launder tainted data http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2011-1487
CVE-2011-1487 affects Perl 5.10.x–5.13.11 where the functions lc, lcfirst, uc, and ucfirst fail to apply taint to the return value during processing tainted input, potentially allowing context-dependent attackers to bypass taint protection. Public advisories (e.g., MiracleLinux AXSA-2011-570:01 a...
CVE-2011-1487
creationtimestamp| type| source ---|---|--- 2011-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35554...
SuSE 11 Security Update : expat (SAT Patch Number 1487)
Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat. CVE-2009-3720 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The te...
SLES9: Security update for wget
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017044 within the SuSE...
SLES9: Security update for wget
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wget For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017044 within the SuSE...
CVE-2009-1487
CVE-2009-1487 describes an SQL injection vulnerability in FunGamez RC1, specifically in pages/login.php where the login_user parameter (username) allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation on the login_user field. Impact stated: arbitrary ...