NVD

Id
21062  
Name
CVE-2016-6185  
Description
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-02  
Modified Date
2016-11-28  
Seq
2016-6185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114607 21062 CVE-2016-6185 http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7  View
114608 21062 CVE-2016-6185 DSA-3628  View
114609 21062 CVE-2016-6185 [oss-security] 20160707 CVE Request: perl: XSLoader: could load shared library from incorrect location  View
114610 21062 CVE-2016-6185 [oss-security] 20160708 Re: CVE Request: perl: XSLoader: could load shared library from incorrect location  View
114611 21062 CVE-2016-6185 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
114612 21062 CVE-2016-6185 91685  View
114613 21062 CVE-2016-6185 1036260  View
114614 21062 CVE-2016-6185 FEDORA-2016-742bde2be7  View
114615 21062 CVE-2016-6185 FEDORA-2016-485dff6060  View
114616 21062 CVE-2016-6185 FEDORA-2016-eb2592245b  View
114617 21062 CVE-2016-6185 https://rt.cpan.org/Public/Bug/Display.html?id=115808  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3360 JVNDB-2016-004133 Perl の XSLoader の XSLoader::load メソッドにおける任意のコードを実行される脆弱性 Perl の XSLoader の XSLoader::load メソッドは、文字列 eval 内で呼び出される場合、.so ファイルを適切に検索しないため、任意のコードを実行される脆弱性が存在します。 CVE-2016-6185 92692 CVE-2016-6185 21062 4.6 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004133.html 2016-07-03 2016-11-16 View