ePerl远程缓冲区溢出漏洞

漏洞信息详情

ePerl远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200106-192
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2001-0458
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2001-06-27
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  ralf_s._engelschall
• 漏洞来源：
  Discovered by Fumi…

ePerl 2.2.14-0.7之前的版本存在多个缓冲区溢出漏洞。本地和远程攻击者利用这些漏洞执行任意命令。

upgraded ePerl packages have been supplied for Debian GNU/Linux 2.2 and Linux-Mandrake 7.1, 7.2 and Corporate Server 1.0.1.
Ralf S. Engelschall ePerl 2.2.12

• Debian 2.2 alpha eperl_2.2.14-0.7potato2_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/eper
  l_2.2.14-0.7potato2_alpha.deb
• Debian 2.2 ARM eperl_2.2.14-0.7potato2_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/eperl_
  2.2.14-0.7potato2_arm.deb
• Debian 2.2 i386 eperl_2.2.14-0.7potato2_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/eperl
  _2.2.14-0.7potato2_i386.deb
• Debian 2.2 ppc eperl_2.2.14-0.7potato2_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/ep
  erl_2.2.14-0.7potato2_powerpc.deb
• Debian 2.2 sparc eperl_2.2.14-0.7potato2_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/eper
  l_2.2.14-0.7potato2_sparc.deb
• Mandrake 1.0.1 i586 eperl-2.2.14-7.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/1.0.1/RPMS
  /eperl-2.2.14-7.2mdk.i586.rpm
• Mandrake 7.1 i586 eperl-2.2.14-7.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/e
  perl-2.2.14-7.2mdk.i586.rpm
• Mandrake 7.2 i586 eperl-2.2.14-7.1mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/e
  perl-2.2.14-7.1mdk.i586.rpm
• S.u.S.E. 6.3 i386 eperl-2.2.14-202.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/d1/eperl-2.2.14-202.i386.r
  pm
• S.u.S.E. 6.4 i386 eperl-2.2.14-203.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/d1/eperl-2.2.14-203.i386.r
  pm
• S.u.S.E. 7.0 i386 eperl-2.2.14-203.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/d1/eperl-2.2.14-203.i386.r
  pm
• S.u.S.E. 7.1 i386 eperl-2.2.14-206.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/d2/eperl-2.2.14-206.i386.r
  pm
• S.u.S.E. 7.1 sparc eperl-2.2.14-193.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/d2/eperl-2.2.14-193.sparc
  .rpm

Ralf S. Engelschall ePerl 2.2.13

• Debian 2.2 alpha eperl_2.2.14-0.7potato2_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/eper
  l_2.2.14-0.7potato2_alpha.deb
• Debian 2.2 ARM eperl_2.2.14-0.7potato2_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/eperl_
  2.2.14-0.7potato2_arm.deb
• Debian 2.2 i386 eperl_2.2.14-0.7potato2_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/eperl
  _2.2.14-0.7potato2_i386.deb
• Debian 2.2 ppc eperl_2.2.14-0.7potato2_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/ep
  erl_2.2.14-0.7potato2_powerpc.deb
• Debian 2.2 sparc eperl_2.2.14-0.7potato2_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/eper
  l_2.2.14-0.7potato2_sparc.deb
• Mandrake 1.0.1 i586 eperl-2.2.14-7.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/1.0.1/RPMS
  /eperl-2.2.14-7.2mdk.i586.rpm
• Mandrake 7.1 i586 eperl-2.2.14-7.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/e
  perl-2.2.14-7.2mdk.i586.rpm
• Mandrake 7.2 i586 eperl-2.2.14-7.1mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/e
  perl-2.2.14-7.1mdk.i586.rpm
• S.u.S.E. 6.3 i386 eperl-2.2.14-202.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/d1/eperl-2.2.14-202.i386.r
  pm
• S.u.S.E. 6.4 i386 eperl-2.2.14-203.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/d1/eperl-2.2.14-203.i386.r
  pm
• S.u.S.E. 7.0 i386 eperl-2.2.14-203.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/d1/eperl-2.2.14-203.i386.r
  pm
• S.u.S.E. 7.1 i386 eperl-2.2.14-206.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/d2/eperl-2.2.14-206.i386.r
  pm
• S.u.S.E. 7.1 sparc eperl-2.2.14-193.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/d2/eperl-2.2.14-193.sparc
  .rpm

来源: XF
名称: linux-eperl-bo
链接:http://xforce.iss.net/static/6198.php

来源: BID
名称: 2464
链接:http://www.securityfocus.com/bid/2464

来源: MANDRAKE
名称: MDKSA-2001:027
链接:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-027.php3

来源: DEBIAN
名称: DSA-034
链接:http://www.debian.org/security/2001/dsa-034

来源: SUSE
名称: SuSE-SA:2001:08
链接:http://www.novell.com/linux/security/advisories/2001_008_eperl.html