CVE-2001-0815

Опубликовано: 06 дек. 2001

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.

Ссылки

http://bugs.activestate.com/show_bug.cgi?id=18062
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=100583978302585&w=2
http://www.osvdb.org/678
http://www.securityfocus.com/bid/3526
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7539
http://bugs.activestate.com/show_bug.cgi?id=18062
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=100583978302585&w=2
http://www.osvdb.org/678
http://www.securityfocus.com/bid/3526
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7539

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:activestate:activeperl:*:*:*:*:*:*:*:*

Версия до 5.6.1.629 (включая)

EPSS

Процентиль: 97%

0.35934

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c5px-j32w-fcqp

github

почти 4 года назад