exploits , vulnerabilities , articles , Perl SuidPerl Multiple Local Vulnerabilities

Title	Perl SuidPerl Multiple Local Vulnerabilities
Published	2005-02-02-12:00AM
Updated	2005-06-11-12:46AM
Class	Unknown
CVE	CAN-2005-0155 CAN-2005-0156
Remote	No
Local	Yes
Credit	These vulnerabilities were announced in a vendor advisory.
Vulnerable	Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Linux 1.5 Trustix Secure Enterprise Linux 2.0 SGI ProPack 3.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux 8.1 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 RedHat Fedora Core3 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 3 RedHat Desktop 3.0 Larry Wall Perl 5.8.4 5 Larry Wall Perl 5.8.4 4 Larry Wall Perl 5.8.4 3 Larry Wall Perl 5.8.4 2.3 Larry Wall Perl 5.8.4 2 Larry Wall Perl 5.8.4 1 Larry Wall Perl 5.8.4 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 Larry Wall Perl 5.8.3 Gentoo Linux Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Ubuntu Ubuntu Linux 4.1 ia32 Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ppc Larry Wall Perl 5.8.1 Larry Wall Perl 5.8 Turbolinux Home Turbolinux Turbolinux Desktop 10.0 IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable
Code	Kevin Finisterre <kf@digitalmunition.com> has provided the following proof of concept exploits: /data/vulnerabilities/exploits/ex_perl.c /data/vulnerabilities/exploits/ex_perl2.c /data/vulnerabilities/exploits/ex_perl.c /data/vulnerabilities/exploits/ex_perl2.c
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities