PT-2014-2082 · Apache+2 · Spamassassin+2

Vincent Danen · Publicado 2014-02-10 · Atualizado 2024-06-15 · CVE-2010-4777

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Perl versions 5.10.0 through 5.14.0

Description The issue allows context-dependent attackers to cause a denial of service, resulting in an assertion failure and application exit, via crafted input that is not properly handled when using certain regular expressions. This has been demonstrated by causing applications such as SpamAssassin and OCSInventory to crash.

Recommendations For Perl versions 5.10.0 through 5.14.0, consider disabling debugging mode to prevent the denial of service, as a temporary workaround until a patch is available.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-4777

OPENSUSE-SU-2024:10449-1

Produtos afetados

Ocs Inventory Ng

Perl

Spamassassin

Referências · 18

• 🔥 https://exploit-db.com/exploits/35489 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4777 · Nota
• https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html · Nota
• https://rt.perl.org/Public/Bug/Display.html?id=76538 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10449-1 · Aviso do Fabricante
• http://forums.ocsinventory-ng.org/viewtopic.php?id=7215 · Nota
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4777 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-4410 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=694166 · Nota
• http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-4411 · Nota
• https://suse.com/security/cve/CVE-2010-4777 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4777 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4777 · Nota de Segurança