CVE-2018-2381

SAP ERP Financials Information System SAPAPPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAPFIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2381

SAP ERP Financials Information System SAPAPPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAPFIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2381

CVE-2018-2381 affects SAP ERP Financials components (SAP_APPL 6.00–6.06, 6.16; SAP_FIN 6.17–7.30; S4CORE 1.00–1.02). The issue is insufficient authorization checks for an authenticated user, enabling escalation of privileges within the application. The description consistently states privilege el...

Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (July 2017 CPU) (httpoxy)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve. An...

CVE-2006-2381

...

CVE-2006-2381

This CVE-2006-2381 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-2381

Summary: CVE-2017-2381 affects macOS prior to 10.12.4, involving the sudo component. An access/privilege-elevation issue could allow remote authenticated users to gain privileges by exploiting membership in the admin group on a network directory server. Root cause: permission checking flaw in sud...

openSUSE Security Update : perl (openSUSE-2016-1086)

This update for Perl fixes the following issues : - CVE-2016-6185: Xsloader looking at a 'eval' directory. bsc988311 - CVE-2016-1238: Searching current directory for optional modules. bsc987887 - CVE-2015-8853: Regular expression engine hanging on bad utf8. bsc - CVE-2016-2381: Environment dup...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2016:2263-1)

This update for Perl fixes the following issues : - CVE-2016-6185: Xsloader looking at a 'eval' directory. bsc988311 - CVE-2016-1238: Searching current directory for optional modules. bsc987887 - CVE-2015-8853: Regular expression engine hanging on bad utf8. bsc - CVE-2016-2381: Environment dup...

SUSE SLES11 Security Update : perl (SUSE-SU-2016:2246-1)

This update for perl fixes the following issues : - CVE-2016-6185: xsloader looking at a 'eval' directory bsc988311 - CVE-2016-1238: searching current directory for optional modules bsc987887 - CVE-2015-8853: regex engine hanging on bad utf8 bnc976584 - CVE-2016-2381: environment dup handling bug...

CVE-2016-2381

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp...

CVE-2016-2381

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp...

CVE-2016-2381

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp...

CVE-2016-2381

CVE-2016-2381 describes a Perl taint protection bypass in child processes caused by duplicate environment variables in envp. This context-dependent issue could allow an attacker to bypass taint checks, potentially enabling unintended behavior or exposure in vulnerable Perl workflows. Public refer...

openSUSE Security Update : perl (openSUSE-2016-386)

This update for perl fixes the following issues : - CVE-2016-2381: Fixed environment duplicated variable handling bug boo967082 - fix memory leak in 'use utf8' handling boo928292 - CVE-2015-8607: Fixed taint propagation in canonpath boo961528 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

USN-2916-1 Perl vulnerabilities | Cloud Foundry

USN-2916-1 Perl vulnerabilities Medium Vendor Ubuntu, Perl Versions Affected Ubuntu 14.04 LTS Description Several security issues were fixed in Perl. It was discovered that Perl incorrectly handled certain regular expressions with an invalid back-reference. An attacker could use this issue to cau...

Mageia: Security Advisory (MGASA-2016-0099)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0099 Updated perl packages fix CVE-2016-2381

Updated perl packages fix security vulnerability: Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV,...

Updated perl packages fix CVE-2016-2381

Updated perl packages fix security vulnerability: Stephane Chazelas discovered a bug in the environment handling in Perl. Perl provides a Perl-space hash variable, %ENV, in which environment variables can be looked up. If a variable appears twice in envp, only the last value would appear in %ENV,...

Fedora Update for perl FEDORA-2016-5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...