Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:0746-1

Опубликовано: 15 мар. 2023
Источник: suse-cvrf

Описание

Security update for perl-Net-Server

This update for perl-Net-Server fixes the following issues:

  • CVE-2013-1841: Fixed insufficient hostname access checking (bsc#808830).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4
perl-Net-Server-2.009-150000.3.3.1
SUSE Linux Enterprise Real Time 15 SP3
perl-Net-Server-2.009-150000.3.3.1
openSUSE Leap 15.4
perl-Net-Server-2.009-150000.3.3.1

Ссылки

Описание

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:perl-Net-Server-2.009-150000.3.3.1
SUSE Linux Enterprise Real Time 15 SP3:perl-Net-Server-2.009-150000.3.3.1
openSUSE Leap 15.4:perl-Net-Server-2.009-150000.3.3.1
Ссылки