PT-2003-1185 · Perl+1 · Perl+2

Publicado 2003-04-11 · Atualizado 2008-09-05 · CVE-2002-1438

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Perl 5.003 on Novell NetWare 5.1 and NetWare 6

Description The issue allows remote attackers to obtain Perl version information. This is achieved by utilizing the -v option in the web handler for Perl.

Recommendations For Perl 5.003 on Novell NetWare 5.1 and NetWare 6, consider restricting access to the web handler to prevent remote attackers from obtaining version information.

Correção

Identificadores relacionados

CVE-2002-1438

Produtos afetados

Netware 5.1

Netware 6

Perl

Referências · 5

• http://securityfocus.com/bid/5521 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1438 · Nota de Segurança
• http://support.novell.com/servlet/tidfinder/2963307 · Nota
• http://iss.net/security_center/static/9917.php · Aviso do Fabricante