Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-3962
HistoryDec 01, 2005 - 12:00 a.m.

CVE-2005-3962

2005-12-0100:00:00
ubuntu.com
ubuntu.com
6

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.1%

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in
Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory
and possibly execute arbitrary code via format string specifiers with large
values, which causes an integer wrap and leads to a buffer overflow, as
demonstrated using format string vulnerabilities in Perl applications.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchperl< 5.8.7-10ubuntu1UNKNOWN
ubuntu6.10noarchperl< 5.8.7-10ubuntu1UNKNOWN
ubuntu7.04noarchperl< 5.8.7-10ubuntu1UNKNOWN

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.1%