113 matches found
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_6329_code_injection1)
The remote Solaris system is missing necessary patches to address security updates : - The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, whi...
Oracle Solaris Third-Party Patch Update : perl-512 (cve_2012_5195_heap_buffer)
The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...
GLSA-201410-02 : Perl, Perl Locale-Maketext module: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201410-02 Perl, Perl Locale-Maketext module: Multiple vulnerabilities Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the...
Perl, Perl Locale-Maketext module: Multiple vulnerabilities
Background Locale-Maketext - Perl framework for localization Description Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the module. The vulnerabilities are caused due to the “compile”...
Foswiki MAKETEXT Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Ubuntu: Security Advisory (USN-2099-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for perl USN-2099-1
Check for the Version of perl OpenVAS Vulnerability Test $Id: gbubuntuUSN20991.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for perl USN-2099-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
[USN-2099-1] Perl vulnerability
========================================================================== Ubuntu Security Notice USN-2099-1 February 05, 2014 perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
perl Locale::Maketext code execution
It's possible to call external functions on template compilation...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 : perl vulnerability (USN-2099-1)
It was discovered that Perl's Locale::Maketext module incorrectly handled backslashes and fully qualified method names. An attacker could possibly use this flaw to execute arbitrary code when an application used untrusted templates. Note that Tenable Network Security has extracted the preceding...
USN-2099-1: Perl vulnerability
It was discovered that Perl's Locale::Maketext module incorrectly handled backslashes and fully qualified method names. An attacker could possibly use this flaw to execute arbitrary code when an application used untrusted templates...
GLSA-201401-11 : Perl, Locale Maketext Perl module: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201401-11 Perl, Locale Maketext Perl module: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl and Locale::Maketext Perl module. Please review the CVE identifiers referenced below for details. Impact :...
Perl, Locale Maketext Perl module: Multiple vulnerabilities
Background Perl is Larry Wall’s Practical Extraction and Report Language. Locale::Maketext is a Perl module - framework for localization. Description Multiple vulnerabilities have been discovered in Perl and Locale::Maketext Perl module. Please review the CVE identifiers referenced below for...
Amazon Linux AMI : perl (ALAS-2013-177)
A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application...
Oracle Linux 5 / 6 : perl (ELSA-2013-0685)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0685 advisory. - Resolves: 915692 - CVE-2012-5526 newline injection due to improper CRLF escaping in Set-Cookie and P3P headers - Resolves: 915692 - CVE-2012-6329...
TWiki MAKETEXT Remote Command Execution (CVE-2012-6329)
The vulnerability is due to lack of input sanitization in the affected function. A remote attacker can exploit this issue by sending a specially crafted input to the application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...
Medium: perl
Issue Overview: A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the...
RedHat Update for perl RHSA-2013:0685-01
Check for the Version of perl OpenVAS Vulnerability Test RedHat Update for perl RHSA-2013:0685-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CentOS Update for perl CESA-2013:0685 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"per...
CentOS Update for perl CESA-2013:0685 centos5
Check for the Version of perl OpenVAS Vulnerability Test CentOS Update for perl CESA-2013:0685 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...