[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-7319

Date: (C)2017-11-08   (M)2017-11-16 


The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

CVSS Score: Access Vector:
Exploit Score: Access Complexity:
Impact Score: Authentication:
 Confidentiality:
 Integrity:
 Availability:





Reference:
http://matthias.sdfeu.org/devel/net-ping-external-cmd-injection.patch
http://www.openwall.com/lists/oss-security/2017/11/07/4
https://bugs.debian.org/881097
https://rt.cpan.org/Public/Bug/Display.html?id=33230

© 2013 SecPod Technologies