local and remote compromise in eperl

The ePerl program is a interpreter for the Embedded Perl 5 Language. It’s main purpose is to serve as Webserver scripting language for dynamic HTML page programming. Besides this it could also serve as a standalone Unix filter. Fumitoshi Ukai and Denis Barbier have found several potential buffer overflows, which could lead to local privilege escalation if installed setuid (note: it’s not installed setuid per default) or to remote compromise.