Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24751
HistoryApr 10, 2020 - 1:03 a.m.

Arbitrary Code Execution

2020-04-1001:03:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.036 Low

EPSS

Percentile

91.6%

JSON

perl is vulnerable to arbitrary code execution. It was found that the “new” constructor of the Digest module used its argument as part of the string expression passed to the eval() function. An attacker could possibly use this flaw to execute arbitrary Perl code with the privileges of a Perl program that uses untrusted input as an argument to the constructor.

Related

openvas 30
nessus 16
cve 1
nvd 1
debiancve 1
ubuntucve 1
altlinux 1
securityvulns 4
aix 1
prion 1
gentoo 1
cvelist 1
redhat 2
fedora 1
amazon 1
oraclelinux 2
f5 1
centos 1
ubuntu 1
vmware 2
openvas
openvas
Mandriva Update for perl MDVSA-2012:009 (perl)
2012-01-20 00:00:00
Gentoo Security Advisory GLSA 201401-33
2015-09-29 00:00:00
Mandriva Update for perl MDVSA-2012:009 (perl)
2012-01-20 00:00:00
nessus
nessus
AIX 5.3 TL 12 : perl (IV10197)
2013-01-30 00:00:00
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2011_3597_improper_input)
2015-01-19 00:00:00
GLSA-201401-33 : Perl Digest-Base module: Arbitrary code execution
2014-01-30 00:00:00
cve
cve
CVE-2011-3597
2012-01-13 18:55:03
nvd
nvd
CVE-2011-3597
2012-01-13 18:55:03
debiancve
debiancve
CVE-2011-3597
2012-01-13 18:55:03
ubuntucve
ubuntucve
CVE-2011-3597
2012-01-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package perl version 1:5.14.2-alt4
2012-01-20 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:009 ] perl
2012-01-20 00:00:00
perl security vulnerabilities
2012-01-20 00:00:00
[USN-1643-1] Perl vulnerabilities
2012-12-02 00:00:00
aix
aix
Perl Digest Module Digest->new() Code Injection
2011-11-22 15:00:14
prion
prion
Sql injection
2012-01-13 18:55:00
gentoo
gentoo
Perl Digest-Base module: Arbitrary code execution
2014-01-29 00:00:00
cvelist
cvelist
CVE-2011-3597
2012-01-13 18:00:00
redhat
redhat
(RHSA-2011:1424) Moderate: perl security update
2011-11-03 00:00:00
(RHSA-2011:1797) Moderate: perl security update
2011-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: perl-5.12.4-147.fc14
2011-11-03 00:22:52
amazon
amazon
Medium: perl
2011-11-09 21:48:00
oraclelinux
oraclelinux
perl security update
2011-11-03 00:00:00
perl security update
2011-12-08 00:00:00
f5
f5
K83058481 : Perl vulnerabilities CVE-2011-1487, CVE-2011-2939, and CVE-2011-3597
2017-10-16 00:00:00
centos
centos
perl security update
2011-12-09 08:14:32
ubuntu
ubuntu
Perl vulnerabilities
2012-11-30 00:00:00
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00

0.036 Low

EPSS

Percentile

91.6%

JSON
Related for VERACODE:24751
openvas30nessus16cve1nvd1debiancve1ubuntucve1altlinux1securityvulns4aix1prion1gentoo1cvelist1redhat2fedora1amazon1oraclelinux2f51centos1ubuntu1vmware2