PT-2020-6858 · Cpan +6 · Cpan +6

Name of the Vulnerable Software and Affected Versions: CPAN version 2.28 Description: The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access...

EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-1476)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-depende...

EulerOS 2.0 SP3 : perl (EulerOS-SA-2019-2648)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum,...

CVE-2013-4184

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

CVE-2013-4184

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

Design/Logic Flaw

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

CVE-2013-4184

CVE-2013-4184 affects the Perl module Data::UUID from CPAN version 1.219, vulnerable to symlink attacks due to a fragile handling of temporary files. Multiple connected sources show vendor advisories and distro patches (e.g., Fedora advisory FEDORA-2024-3da8ed5be3 and Mageia/OpenVAS notices) conf...

CVE-2013-4184

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

CVE-2013-4184

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...

EulerOS 2.0 SP5 : perl (EulerOS-SA-2019-2220)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to...

CVE-2011-2767

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

CVE-2016-9180

perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting...

Perl Module Detection via CPAN Minus

Binary data 9514.prm...

Perl Module Detection via CPAN

Binary data 9513.prm...

CVE-2016-1238

1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum, 6 cpan/Encode/bin/enc2xs, 7 cpan/Encode/bin/encguess, 8 cpan/Encode/bin/piconv, 9 cpan/Encode/bin/ucmlint, 10 cpan/Encode/bin/unidump, 11...

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 15, 2015 http://www.debian.org/security/faq -...

DSA-3261-1 libmodule-signature-perl - security update

Bulletin has no description...

Mandriva Linux Security Advisory : perl-Module-Signature (MDVSA-2015:207)

Updated perl-Module-Signature package fixes the following security vulnerabilities reported by John Lightsey : Module::Signature could be tricked into interpreting the unsigned portion of a SIGNATURE file as the signed portion due to faulty parsing of the PGP signature boundaries. When verifying...

CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

Fedora 21 : perl-Module-Signature-0.78-1.fc21 / perl-Test-Signature-1.11-1.fc21 (2015-5833)

This update addresses various security issues in perl-Module-Signature as described below. The default behavior is also changed so as to ignore any MANIFEST.SKIP files unless a 'skip' parameter is specified. An updated version of perl-Test-Signature that accounts for the changed default behavior ...