Debian Security Advisory DSA 2801-1 (libhttp-body-perl - design error)

Jonathan Dolle reported a design error in HTTP::Body, a Perl module for processing data from HTTP POST requests. The HTTP body multipart parser creates temporary files which preserve the suffix of the uploaded file. An attacker able to upload files to a service that uses HTTP::Body::Multipart cou...

DSA-2801-1 libhttp-body-perl - design error

Bulletin has no description...

Perl Module-Signature module: Arbitrary code execution

Background The Perl Module::Signature module adds signing capabilities to CPAN modules. Description The ‘cpansign verify’ command will automatically download keys and use them to check the signature of CPAN packages via the SIGNATURE file. If an attacker were to replace this SHA1 with a special...

Fedora Update for perl-Module-Metadata FEDORA-2013-15196

Check for the Version of perl-Module-Metadata OpenVAS Vulnerability Test Fedora Update for perl-Module-Metadata FEDORA-2013-15196 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 18 : perl-Module-Metadata-1.000015-1.fc18 (2013-15157)

This update clarifies the module's documentation about the code it executes, i.e. it does 'eval' a module to determine its version number. Previously it said that it did not execute unsafe code. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for perl-Module-Metadata FEDORA-2013-15157

Check for the Version of perl-Module-Metadata OpenVAS Vulnerability Test Fedora Update for perl-Module-Metadata FEDORA-2013-15157 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 19 : perl-Module-Metadata-1.000015-1.fc19 (2013-15196)

This update clarifies the module's documentation about the code it executes, i.e. it does 'eval' a module to determine its version number. Previously it said that it did not execute unsafe code. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for perl-Module-Metadata FEDORA-2013-15157

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for perl-Module-Metadata FEDORA-2013-15196

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell ZENworks Mobile Management DUSAP.php Language Parameter Vulnerability

Added: 07/18/2013 CVE: CVE-2013-1082 BID: 60179 OSVDB: 91118 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...

Fedora 18 : perl-Module-Signature-0.73-1.fc18 (2013-10430)

This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem CVE-2013-2145. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 19 : perl-Module-Signature-0.73-1.fc19 (2013-10354)

This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem CVE-2013-2145. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 17 : perl-Module-Signature-0.73-1.fc17 (2013-10415)

This update ensures that digest modules are only loaded from absolute paths in @INC, avoiding a potential arbitrary code execution problem CVE-2013-2145. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[USN-1896-1] Module::Signature perl module vulnerability

========================================================================== Ubuntu Security Notice USN-1896-1 July 03, 2013 libmodule-signature-perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

Ubuntu 12.04 LTS / 12.10 / 13.04 : libmodule-signature-perl vulnerability (USN-1896-1)

Florian Weimer discovered that the Module::Signature perl module incorrectly loaded unknown ciphers from relative directories. An attacker could possibly use this flaw to execute arbitrary code when a signature is verified. Note that Tenable Network Security has extracted the preceding descriptio...

SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution

Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...

SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution

Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...

Mandriva Linux Security Advisory : perl-Module-Signature (MDVSA-2013:185)

Updated perl-Module-Signature package fixes CVE-2013-2145 Arbitrary code execution vulnerability in Module::Signature before 0.72 CVE-2013-2145. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security...

MGASA-2013-0184 Updated perl-Module-Signature package fixes CVE-2013-2145

Arbitrary code execution vulnerability in Module::Signature before 0.72 CVE-2013-2145...

Fedora Update for perl-Module-Signature FEDORA-2013-10415

Check for the Version of perl-Module-Signature OpenVAS Vulnerability Test Fedora Update for perl-Module-Signature FEDORA-2013-10415 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...