PT-2003-1185 · Perl+1 · Perl+2

Published 2003-04-11 · Updated 2008-09-05 · CVE-2002-1438

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Perl 5.003 on Novell NetWare 5.1 and NetWare 6

Description The issue allows remote attackers to obtain Perl version information. This is achieved by utilizing the -v option in the web handler for Perl.

Recommendations For Perl 5.003 on Novell NetWare 5.1 and NetWare 6, consider restricting access to the web handler to prevent remote attackers from obtaining version information.

Fix

Related Identifiers

CVE-2002-1438

Affected Products

Netware 5.1

Netware 6

Perl

References · 5

• http://securityfocus.com/bid/5521 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1438 · Security Note
• http://iss.net/security_center/static/9917.php · Vendor Advisory
• http://support.novell.com/servlet/tidfinder/2963307 · Note