CVE-2011-4115

Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files...

CVE-2011-4116

issafe in the File::Temp module for Perl does not properly handle symlinks...

UBUNTU-CVE-2011-4115

Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files...

CVE-2011-4115

Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files...

CVE-2011-4115

CVE-2011-4115 affects the Perl Parallel::ForkManager module prior to 1.0.0, which does not properly handle temporary files. This can lead to insecure handling of temporary files and potential local file impact. The vulnerability is documented across multiple feeds (NVD entry for CVE-2011-4115 and...

CVE-2011-4115

Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files...

CVE-2011-4116

Technical details (affected products, versions, root cause, exploit information) for CVE-2011-4116 are not provided in the supplied documents. Please monitor for updates from official advisories or vendors.

CVE-2011-4117

The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files...

CVE-2011-4117

CVE-2011-4117 affects the Perl module Batch::BatchRun (version 1.03). The affected component is the Batch::BatchRun module 1.03 for Perl, described as not properly handling temporary files. The connected NVD entry provides CVSS metrics: CVSSv2 base score 5.0 (Medium) with network attack vector, l...

ALPINE-CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

DEBIAN-CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

Code injection

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

CVE-2013-1437

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

DEBIAN-CVE-2013-1437

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

CVE-2013-1437

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

Design/Logic Flaw

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

CVE-2013-1437

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

CVE-2014-3230

CVE-2014-3230 affects the libwww-perl LWP::Protocol::https module (versions 6.04–6.06) when using IO::Socket::SSL as the SSL socket class. The underlying issue is that server certificate validation can be disabled via the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables. Impact described in th...

CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...