11 matches found
EUVD-2013-7062
Malware in sbrugna...
RHEL 7 : perl-plrpc (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-PlRPC: pre-auth remote code execution CVE-2013-7284 Note that Nessus has not tested for this issue but has...
SUSE: Security Advisory (SUSE-SU-2020:2238-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)
This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...
SUSE-SU-2020:2238-1 Security update for perl-PlRPC
This update for perl-PlRPC fixes the following issues: - Security notice: bsc858243, CVE-2013-7284 Document security vulnerability on Storable and reply attack - Add perl-PlRPC-CVE-2013-7284.patch...
Gentoo Security Advisory GLSA 201403-08
Gentoo Linux Local Security Checks GLSA 201403-08 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Design/Logic Flaw
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...
CVE-2013-7284
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...
CVE-2013-7284
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...
CVE-2013-7284
CVE-2013-7284 involves the Perl PlRPC module (likely versions
PlRPC: Arbitrary code execution
Background The Perl RPC Module is a Perl module that implements IDL-free RPCs. Description PlRPC uses Storable module for serialization and deserialization of untrusted data. Deserialized data can contain objects which can lead to loading of foreign modules, and possible execution of arbitrary...