CVE-2016-1238

CVE-2016-1238 affects SpamAssassin (Debian advisory DLA-1578-1). The issue arises when Perl programs do not properly remove trailing periods from the includes directory array, which can allow a local attacker to load a Trojan horse module from the current working directory and gain privileges. De...

perl -- local arbitrary code execution

Sawyer X reports: Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . period characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory...

Perl 5 Memory Corruption Vulnerability

The Perl 5 interpreter is vulnerable to a memory corruption vulnerability which results in memory disclosure and potentially arbitrary code execution when large values are supplied to the x operator. Author: Tim Brown URL: / Product: Perl 5 prior to 5.15.5 Vendor: Perl Risk: Medium Summary The Pe...

Warm Links XSS vuln.

Warm Links XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/warm-links-xss-vuln.html vendor:http://www.mrcgiguy.com/wldetails.shtml affected version:v.1.0.0 and prior Product Description: Directory style index allows for easy navigation Doe...

CVE-1999-0034

CVE-1999-0034 affects the suidperl (sperl) component in Perl 4.x and 5.x, with the root cause described as a buffer overflow in suidperl. Documented impact indicates complete confidentiality, integrity, and availability compromises (local attack vector, no authentication, no user interaction requ...