CVE-2011-2939

CVE-2011-2939 refers to an off-by-one error in the Decode_xs function of the Encode module prior to 2.44, used with Perl before 5.15.6. The flaw can allow context-dependent attackers to trigger a heap-based buffer overflow in a crafted Unicode string, potentially enabling a denial of service due ...

Medium: perl

Issue Overview: A heap-based buffer overflow flaw was found in the way Perl decoded Unicode strings. An attacker could create a malicious Unicode string that, when decoded by a Perl program, would cause the program to crash or, potentially, execute arbitrary code with the permissions of the user...

RHEL 6 : perl (RHSA-2011:1424)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1424 advisory. Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap-based buffer overflo...

Moderate: Red Hat Security Advisory: perl security update

Updated perl packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

Fedora 14 : perl-5.12.4-147.fc14 (2011-13874)

This update fixes security bug in Digest object constructor CVE-2011-3597= and in decoding Unicode string by interpreter CVE-2011-2939. ---------------------------------------------------------------------- -----= Note that Tenable Network Security has extracted the preceding description block...

Fedora Update for perl FEDORA-2011-13874

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Perl "decode_xs()"和"File::Glob::bsd_glob()"远程代码执行漏洞

BUGTRAQ ID: 49858 CVE ID: CVE-2011-2728,CVE-2011-2939 Perl是一种高级、通用、直译式、动态的程序语言。 Perl的"decodexs"和"File::Glob::bsdglob"函数在实现上存在远程代码执行漏洞，远程攻击者可利用此漏洞执行任意代码。 1）在处理GLOBALTDIRFUNC旗标时，"File::Glob::bsdglob"函数中存在的错误可被利用造成非法访问和执行任意代码。 2）Encode中的"decodexs"函数中的错误可通过特制输入造成堆缓冲区溢出。 Perl 5.14.1 厂商补丁： Perl ----...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : postfix vulnerabilities (USN-1113-1)

It was discovered that the Postfix package incorrectly granted write access on the PID directory to the postfix user. A local attacker could use this flaw to possibly conduct a symlink attack and overwrite arbitrary files. This issue only affected Ubuntu 6.06 LTS and 8.04 LTS. CVE-2009-2939 Wiets...

Debian DSA-2233-1 : postfix - several vulnerabilities

Several vulnerabilities were discovered in Postfix, a mail transfer agent. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2939 The postinst script grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to...

[SECURITY] [DSA 2233-1] postfix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2233-1 [email protected] http://www.debian.org/security/ Florian Weimer May 10, 2011 http://www.debian.org/security/faq -...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2010:0952-1)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2010:0951-1)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMA02662)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[security bulletin] HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02735910 Version: 1 HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service DoS NOTICE:...

FreeBSD Security Advisory (FreeBSD-SA-10:10.openssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:10.openssl.asc ADV FreeBSD-SA-10:10.openssl.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:10.openssl.asc Authors: Thomas Reinke Copyright: Copyright c 201...

FreeBSD Security Advisory (FreeBSD-SA-10:10.openssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:10.openssl.asc SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security fix for the ALT Linux 8 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 6 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 9 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...