PT-2011-1237 · Perl · Perl

Jonathan Brossard · Publicado 2011-05-13 · Atualizado 2018-10-09 · CVE-2011-0761

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Perl versions 5.10.x

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved by injecting arguments into certain function calls, including getpeername, readdir, closedir, getsockname, rewinddir, tell, or telldir. The vulnerability is related to a NULL pointer dereference in the telldir function of the Perl interpreter, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For Perl version 5.10.x, consider disabling the telldir function as a temporary workaround until a patch is available. Additionally, restrict the ability to inject arguments into the affected function calls to minimize the risk of exploitation.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2022-02609

CVE-2011-0761

Produtos afetados

Perl

Referências · 13

• 🔥 https://exploit-db.com/exploits/35725 · Exploit
• 🔥 http://toucan-system.com/advisories/tssa-2011-03.txt · Exploit
• 🔥 http://securityfocus.com/bid/47766 · Exploit
• 🔥 http://securitytracker.com/id?1025507 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2011-0761 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67355 · Nota
• https://osv.dev/vulnerability/CVE-2011-0761 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0761 · Nota
• http://securityreason.com/securityalert/8248 · Nota
• http://securityfocus.com/archive/1/517916/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0761 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0761 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2022-02609 · Nota de Segurança