#VU45133 Permissions, Privileges, and Access Controls in Perl - CVE-2011-1487

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU45133

#VU45133 Permissions, Privileges, and Access Controls in Perl - CVE-2011-1487

Published: April 11, 2011 / Updated: August 11, 2020


Vulnerability identifier: #VU45133
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2011-1487
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
Perl
Software vendor:
Perl

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.


Remediation

Install update from vendor's website.

External links