PlRPC: Arbitrary code execution

Background The Perl RPC Module is a Perl module that implements IDL-free RPCs. Description PlRPC uses Storable module for serialization and deserialization of untrusted data. Deserialized data can contain objects which can lead to loading of foreign modules, and possible execution of arbitrary...

Movable Type 5.2.X < 5.2.6 Unspecified Vulnerability

According to its version number, the Movable Type install hosted on the remote web server is affected by an unspecified flaw when the 'commentstate' function is processed by the 'unserialize' function. This flaw is due to an issue with the Perl 'Storable::thaw' function, which is considered unsaf...

Debian DSA-2586-1 : perl - several vulnerabilities

Two vulnerabilities were discovered in the implementation of the Perl programming language : - CVE-2012-5195 The 'x' operator could cause the Perl interpreter to crash if very long strings were created. - CVE-2012-5526 The CGI module does not properly escape LF characters in the Set-Cookie and P3...

[SECURITY] [DSA 2586-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2586-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

DSA-2586-1 perl - several

Bulletin has no description...