PT-2014-4264 · Perl · Marc::File::Xml

John Lightsey · Publicado 2014-01-26 · Atualizado 2017-08-29 · CVE-2014-1626

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MARC::File::XML module versions prior to 1.0.2

Description The issue allows context-dependent attackers to read arbitrary files via a crafted XML file, potentially affecting products such as Evergreen, Koha, and perl4lib that utilize the MARC::File::XML module for Perl.

Recommendations For MARC::File::XML module versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-1626

Produtos afetados

Marc::File::Xml

Referências · 16

• https://osv.dev/vulnerability/CVE-2014-1626 · Aviso do Fabricante
• http://sourceforge.net/p/marcpm/code/ci/cf2d36597a56eeeffd53b38182b8557c7bf569ac · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1626 · Nota de Segurança
• http://osvdb.org/102367 · Nota
• https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/Changes · Nota
• https://cve.org/CVERecord?id=CVE-2014-1626 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-1626 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-1626 · Aviso do Fabricante
• http://lists.katipo.co.nz/pipermail/koha/2014-January/038430.html · Nota
• http://securityfocus.com/bid/65057 · Nota
• https://ubuntu.com/security/CVE-2014-1626 · Aviso do Fabricante
• http://nntp.perl.org/group/perl.perl4lib/2014/01/msg3073.html · Nota
• http://libmail.georgialibraries.org/pipermail/open-ils-general/2014-January/009442.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90620 · Nota
• http://secunia.com/advisories/55404 · Aviso do Fabricante