security flaw

A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information...

security flaw

Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...

Fedora Core 3 : perl-5.8.5-12.FC3 (2005-353)

Security and packaging fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

RHEL 4 : perl (RHSA-2005:103)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:103 advisory. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Kevin Finisterre discovered ...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

CVE-2004-0976

CVE-2004-0976 affects the perl package, notably in Trustix Secure Linux 1.5–2.1 and similar OSes, due to a symlink attack that lets local users overwrite files via temporary files. Root cause is insecure temporary file handling in Perl modules; impact is local with partial integrity impact and no...

Debian DSA-431-1 : perl - information leak

Paul Szabo discovered a number of similar bugs in suidperl, a helper program to run perl scripts with setuid privileges. By exploiting these bugs, an attacker could abuse suidperl to discover information about files such as testing for their existence and some of their permissions that should not...

Debian DSA-371-1 : perl - XSS

A cross-site scripting vulnerability exists in the startform function in CGI.pm. This function outputs user-controlled data into the action attribute of a form element without sanitizing it, allowing a remote user to execute arbitrary web script within the context of the generated page. Any progr...

[SECURITY] [DSA 431-2] New perl packages fix information leak in suidperl

-------------------------------------------------------------------------- Debian Security Advisory DSA 431-2 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

DSA-431 perl - information leak

Bulletin has no description...

[SECURITY] [DSA-386-1] New libmailtools-perl packages fix input validation bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 386-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 18th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-371-1] New perl packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 371-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 11th, 2003 http://www.debian.org/security/faq -...

DSA-371 perl - cross-site scripting

Bulletin has no description...

[SECURITY] [DSA 208-1] New Perl packages correct Safe handling

-------------------------------------------------------------------------- Debian Security Advisory DSA 208-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2002 http://www.debian.org/security/faq -...