ByteOS Network

CVE Vulnerability Details :

CVE-2011-1487

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-11 Apr, 2011 | 18:00

Updated At-06 Aug, 2024 | 22:28

▼CVE Numbering Authority (CNA)

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=692844	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	vendor-advisory x_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html	vendor-advisory x_refsource_FEDORA
http://secunia.com/advisories/44168	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/43921	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2011/dsa-2265	vendor-advisory x_refsource_DEBIAN
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html	vendor-advisory x_refsource_FEDORA
http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336	x_refsource_CONFIRM
http://www.securityfocus.com/bid/47124	vdb-entry x_refsource_BID
http://openwall.com/lists/oss-security/2011/04/04/35	mailing-list x_refsource_MLIST
http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=692898	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2011:091	vendor-advisory x_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilities/66528	vdb-entry x_refsource_XF
http://openwall.com/lists/oss-security/2011/04/01/3	mailing-list x_refsource_MLIST

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=692844

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://secunia.com/advisories/44168

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/43921

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2011/dsa-2265

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/47124

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://openwall.com/lists/oss-security/2011/04/04/35

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=692898

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:091

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66528

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://openwall.com/lists/oss-security/2011/04/01/3

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=692844	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html	vendor-advisory x_refsource_FEDORA x_transferred
http://secunia.com/advisories/44168	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/43921	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2011/dsa-2265	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html	vendor-advisory x_refsource_FEDORA x_transferred
http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/47124	vdb-entry x_refsource_BID x_transferred
http://openwall.com/lists/oss-security/2011/04/04/35	mailing-list x_refsource_MLIST x_transferred
http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99	x_refsource_CONFIRM x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=692898	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:091	vendor-advisory x_refsource_MANDRIVA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/66528	vdb-entry x_refsource_XF x_transferred
http://openwall.com/lists/oss-security/2011/04/01/3	mailing-list x_refsource_MLIST x_transferred