Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-3597
HistoryJan 13, 2012 - 6:55 p.m.

CVE-2011-3597

2012-01-1318:55:03
CWE-20
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.6%

JSON

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.

Affected configurations

NVD
Node
gisle_aasdigestMatch1.00
OR
gisle_aasdigestMatch1.01
OR
gisle_aasdigestMatch1.02
OR
gisle_aasdigestMatch1.03
OR
gisle_aasdigestMatch1.04
OR
gisle_aasdigestMatch1.05
OR
gisle_aasdigestMatch1.06
OR
gisle_aasdigestMatch1.07
OR
gisle_aasdigestMatch1.08
OR
gisle_aasdigestMatch1.09
OR
gisle_aasdigestMatch1.10
OR
gisle_aasdigestMatch1.11
OR
gisle_aasdigestMatch1.12
OR
gisle_aasdigestMatch1.13
OR
gisle_aasdigestMatch1.14
OR
gisle_aasdigestMatch1.15
OR
gisle_aasdigestMatch1.16

Related

veracode 1
openvas 30
nessus 16
securityvulns 4
cve 1
debiancve 1
ubuntucve 1
altlinux 1
aix 1
prion 1
gentoo 1
cvelist 1
redhat 2
fedora 1
amazon 1
oraclelinux 2
centos 1
f5 1
ubuntu 1
vmware 2
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:03:28
openvas
openvas
Mandriva Update for perl MDVSA-2012:009 (perl)
2012-01-20 00:00:00
Gentoo Security Advisory GLSA 201401-33
2015-09-29 00:00:00
Mandriva Update for perl MDVSA-2012:009 (perl)
2012-01-20 00:00:00
nessus
nessus
AIX 5.3 TL 12 : perl (IV10197)
2013-01-30 00:00:00
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2011_3597_improper_input)
2015-01-19 00:00:00
GLSA-201401-33 : Perl Digest-Base module: Arbitrary code execution
2014-01-30 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:009 ] perl
2012-01-20 00:00:00
perl security vulnerabilities
2012-01-20 00:00:00
perl multiple security vulnerabilities
2012-12-02 00:00:00
cve
cve
CVE-2011-3597
2012-01-13 18:55:03
debiancve
debiancve
CVE-2011-3597
2012-01-13 18:55:03
ubuntucve
ubuntucve
CVE-2011-3597
2012-01-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package perl version 1:5.14.2-alt4
2012-01-20 00:00:00
aix
aix
Perl Digest Module Digest->new() Code Injection
2011-11-22 15:00:14
prion
prion
Sql injection
2012-01-13 18:55:00
gentoo
gentoo
Perl Digest-Base module: Arbitrary code execution
2014-01-29 00:00:00
cvelist
cvelist
CVE-2011-3597
2012-01-13 18:00:00
redhat
redhat
(RHSA-2011:1424) Moderate: perl security update
2011-11-03 00:00:00
(RHSA-2011:1797) Moderate: perl security update
2011-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: perl-5.12.4-147.fc14
2011-11-03 00:22:52
amazon
amazon
Medium: perl
2011-11-09 21:48:00
oraclelinux
oraclelinux
perl security update
2011-11-03 00:00:00
perl security update
2011-12-08 00:00:00
centos
centos
perl security update
2011-12-09 08:14:32
f5
f5
K83058481 : Perl vulnerabilities CVE-2011-1487, CVE-2011-2939, and CVE-2011-3597
2017-10-16 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2012-11-30 00:00:00
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.6%

JSON
Related for NVD:CVE-2011-3597
veracode1openvas30nessus16securityvulns4cve1debiancve1ubuntucve1altlinux1aix1prion1gentoo1cvelist1redhat2fedora1amazon1oraclelinux2centos1f51ubuntu1vmware2