ID:3643 - Exploit for Input validation error in Perl - CVE-2011-3597

 
Main Vulnerability Database Exploits ID:3643 - Exploit for Input validation error in Perl - CVE-2011-3597

ID:3643 - Exploit for Input validation error in Perl - CVE-2011-3597

Published: July 29, 2020


Vulnerability identifier: #VU32828
Vulnerability risk: Medium
CVE-ID: CVE-2011-3597
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Perl

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.


Remediation

Install update from vendor's website.