Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2099-1
HistoryFeb 05, 2014 - 12:00 a.m.

Perl vulnerability

2014-02-0500:00:00
ubuntu.com
27

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.59 Medium

EPSS

Percentile

97.7%

JSON

Releases

  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • perl - Practical Extraction and Report Language

Details

It was discovered that Perl’s Locale::Maketext module incorrectly handled
backslashes and fully qualified method names. An attacker could possibly
use this flaw to execute arbitrary code when an application used untrusted
templates.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchperl-modules< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.10noarchlibperl-dev< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.10noarchlibperl5.14< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.10noarchperl< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.10noarchperl-base< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.10noarchperl-debug< 5.14.2-13ubuntu0.3UNKNOWN
Ubuntu12.04noarchperl-modules< 5.14.2-6ubuntu2.4UNKNOWN
Ubuntu12.04noarchlibperl-dev< 5.14.2-6ubuntu2.4UNKNOWN
Ubuntu12.04noarchlibperl5.14< 5.14.2-6ubuntu2.4UNKNOWN
Ubuntu12.04noarchperl< 5.14.2-6ubuntu2.4UNKNOWN
Rows per page:
1-10 of 191

Related

checkpoint_advisories 1
nessus 22
fedora 5
openvas 33
cve 1
debiancve 1
dsquare 1
packetstorm 3
seebug 1
securityvulns 6
gentoo 1
prion 1
metasploit 1
ubuntucve 2
aix 1
exploitdb 1
zdt 2
suse 4
f5 2
centos 1
veracode 3
redhat 2
amazon 1
oraclelinux 1
checkpoint_advisories
checkpoint_advisories
TWiki MAKETEXT Remote Command Execution (CVE-2012-6329)
2013-06-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 : perl vulnerability (USN-2099-1)
2014-02-06 00:00:00
Fedora 16 : perl-5.14.3-205.fc16 (2013-0633)
2013-01-25 00:00:00
AIX Perl Advisory : perl_advisory4.asc
2014-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: perl-5.14.3-221.fc17
2013-02-19 01:37:56
[SECURITY] Fedora 18 Update: perl-5.16.2-237.fc18
2013-01-30 00:54:03
[SECURITY] Fedora 17 Update: perl-5.14.4-224.fc17
2013-04-03 04:55:43
openvas
openvas
Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
2013-01-24 00:00:00
Ubuntu Update for perl USN-2099-1
2014-02-11 00:00:00
Strawberry Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities - Windows
2013-01-24 00:00:00
cve
cve
CVE-2012-6329
2013-01-04 21:55:00
debiancve
debiancve
CVE-2012-6329
2013-01-04 21:55:00
dsquare
dsquare
TWiki 5.1.2 RCE
2013-01-13 00:00:00
packetstorm
packetstorm
TWiki 5.1.2 Command Execution
2012-12-15 00:00:00
TWiki MAKETEXT Remote Command Execution
2012-12-24 00:00:00
Foswiki MAKETEXT Remote Command Execution
2012-12-24 00:00:00
seebug
seebug
TWiki MAKETEXT Remote Command Execution
2012-12-25 00:00:00
securityvulns
securityvulns
perl Locale::Maketext code execution
2014-02-10 00:00:00
[USN-2099-1] Perl vulnerability
2014-02-10 00:00:00
Foswiki Security Alert CVE-2012-6329, CVE-2012-6330 Remote code execution and other vulnerabilities in MAKETEXT macro
2012-12-18 00:00:00
gentoo
gentoo
Perl, Perl Locale-Maketext module: Multiple vulnerabilities
2014-10-12 00:00:00
prion
prion
Design/Logic Flaw
2013-01-04 21:55:00
metasploit
metasploit
TWiki MAKETEXT Remote Command Execution
2012-12-21 10:30:04
ubuntucve
ubuntucve
CVE-2012-6329
2013-01-04 00:00:00
CVE-2013-1666
2019-11-01 00:00:00
aix
aix
Security Vulnerability in Perl _compile
2014-04-23 17:08:11
exploitdb
exploitdb
TWiki MAKETEXT - Remote Command Execution (Metasploit)
2012-12-23 00:00:00
zdt
zdt
Foswiki MAKETEXT 1.1.7 / 1.0.10 Code Execution Vulnerability
2013-02-20 00:00:00
Foswiki 1.0.10 / 1.1.6 Code Injection / Denial Of Service
2012-12-18 00:00:00
suse
suse
update for perl (important)
2013-03-20 11:05:11
update for perl (important)
2013-03-20 14:04:22
Security update for Perl (important)
2013-03-13 00:05:41
f5
f5
K15867 : Perl vulnerabilities CVE-2012-5195, CVE-2012-5526, CVE-2012-6329, and CVE-2013-1667
2015-09-15 00:00:00
SOL15867 - Perl vulnerabilities CVE-2012-5195, CVE-2012-5526, CVE-2012-6329, and CVE-2013-1667
2014-11-25 00:00:00
centos
centos
perl security update
2013-03-26 21:05:02
veracode
veracode
Memory Corruption
2019-05-02 04:54:30
Privilege Escalation
2019-05-02 04:54:30
HTTP Header Injection
2019-05-02 04:54:30
redhat
redhat
(RHSA-2013:0685) Moderate: perl security update
2013-03-26 00:00:00
(RHSA-2013:0746) Important: rhev-hypervisor6 security and bug fix update
2013-04-23 00:00:00
amazon
amazon
Medium: perl
2013-04-04 11:10:00
oraclelinux
oraclelinux
perl security update
2013-03-26 00:00:00

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.59 Medium

EPSS

Percentile

97.7%

JSON
Related for USN-2099-1
checkpoint_advisories1nessus22fedora5openvas33cve1debiancve1dsquare1packetstorm3seebug1securityvulns6gentoo1prion1metasploit1ubuntucve2aix1exploitdb1zdt2suse4f52centos1veracode3redhat2amazon1oraclelinux1