CVE-2001-0458

CVE-2001-0458 : Multiple buffer overflows in ePerl prior to 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. Mandrake and Debian advisories note upgrades to 2.2.14-0.7 (or later) fix the issue; other references corroborate the vulnerability in ePerl.

[SECURITY] [DSA 034-1] New version of ePerl packages available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-034-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...

Дырка в ePerl (buffer overflow)

Переполнение буфера. Программа не-suid по-умолчанию...

[SECURITY] [DSA 034-1] New version of ePerl packages available

---------------------------------------------------------------------------- Debian Security Advisory DSA-034-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : ePerl...

ePerl.txt

Date: Mon, 6 Jul 1998 22:39:24 -0300 From: Tiago Luz Pinto Subject: ePerl: bad handling of ISINDEX queries ePerl is an embedded Perl Interpreter for HTTP servers Description: Incorrect Handling of ISINDEX queries command line argument when ePerl runs as a nph-cgi/cgi. Cause: According with the...

[SECURITY] New versions of eperl fixes security drift

We have received a report from Tiago Luz Pinto that the eperl package included in 2.0 misinterprets ISINDEX queries. This can lead to arbitrary Perl code being executed on the server. We recommend you upgrade your eperl package immediately. dpkg -i file.deb will install the referenced file. Debia...

[SECURITY] New versions of eperl fixes security drift

We have received a report from Tiago Luz Pinto that the eperl package included in 2.0 misinterprets ISINDEX queries. This can lead to arbitrary Perl code being executed on the server. We recommend you upgrade your eperl package immediately. dpkg -i file.deb will install the referenced file. Debia...

CVE-1999-1437

ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml...

Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query

Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query source: https://www.securityfocus.com/bid/151/info A bug exists in ePerl's handling of the ISINDEX queries. When ISINDEX is used, the query is passed on the command line by the web server. This would allow an attacker to execute arbitra...

Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query

source: https://www.securityfocus.com/bid/151/info A bug exists in ePerl's handling of the ISINDEX queries. When ISINDEX is used, the query is passed on the command line by the web server. This would allow an attacker to execute arbitrary code via the ePerl interpreter, with none of the...