113 matches found
RHEL 5 / 6 : perl (RHSA-2013:0685)
Updated perl packages that fix multiple security issues now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CentOS 5 / 6 : perl (CESA-2013:0685)
Updated perl packages that fix multiple security issues now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
perl security update
CentOS Errata and Security Advisory CESA-2013:0685 Updated perl packages that fix multiple security issues now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
perl: possible arbitrary code execution via Locale::Maketext
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
update for perl (important)
Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug w...
Foswiki < 1.1.8 MAKETEXT Macro Arbitrary Code Injection
According to its version number, the instance of Foswiki installed on the remote host is affected by a code injection vulnerability in the '%MAKETEXT%' macro. An incomplete fix to CVE-2012-6329 left this attack vector available in which an attacker can invoke arbitrary Perl modules by escaping...
Foswiki Security: Alert CVE-2013-1666 - Remote Code Execution Vulnerability in MAKETEXT macro.
---+ Security Alert: Code injection vulnerability in MAKETEXT macro This advisory alerts you of a potential security issue with your Foswiki installation. A vulnerability has been reported against the core Perl module CPAN:Locale::Maketext 1, which Foswiki uses to provide translations when...
Foswiki MAKETEXT 1.1.7 / 1.0.10 Code Execution Vulnerability
This advisory alerts you of a potential security issue with your Foswiki installation. A vulnerability has been reported against the core Perl module CPAN:Locale::Maketext, which Foswiki uses to provide translations when UserInterfaceInternationalization is enabled in the configuration. Because o...
Fedora 17 : perl-5.14.3-221.fc17 (2013-1836)
"Fix double-free when loading Digest::SHA object representing the intermediate SHA state from a file RT82655 The following command should be run without any errors. perl -MDigest::SHA -e 'my $d = Digest::SHA-new256 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Fedora 16 : perl-5.14.3-205.fc16 (2013-0633)
Fix Locale::Maketext vulnerability allowing to cross-call functions from message catalogs CVE-2012-6329. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...
Strawberry Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
The host is installed with Strawberry Perl and is prone to multiple code injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbperlmaketextmultcodeinjevulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ Strawberry Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities Windows...
Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities - Windows
Active Perl is prone to multiple code injection vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2012-6329
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
CVE-2012-6329
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
CVE-2012-6329
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
CVE-2012-6330
The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service memory consumption via a large integer in a %MAKETEXT% macro...
Design/Logic Flaw
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
CVE-2012-6329
The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...
CVE-2012-6329
CVE-2012-6329 affects the Perl Locale::Maketext Maketext.pm _compile function. The vulnerability arises from improper handling of backslashes and fully-qualified method names during bracket-notation compilation, allowing context-dependent attackers to execute arbitrary commands via crafted user-s...